Most recent entries from all

ALSA-2026:20929 — Moderate: libexif security update

Affected: AlmaLinux:8: libexif, AlmaLinux:8: libexif-devel

The libexif packages provide a library for extracting extra information from image files.

Security Fix(es):

* libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling (CVE-2026-40385) * libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2026-05545

certfr-2026-avi-0445 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Certaines d'entre elles permettent à un at…

certfr-2026-avi-0445

EUVD-2026-291290

fkie_cve-2026-40386

In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.

GHSA-p6wp-hhx9-7jj5

In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.

msrc_CVE-2026-40386 — CVE-2026-40386

msrc_CVE-2026-40386

OESA-2026-1987 — libexif security update

Affected: openEuler:20.03-LTS-SP4: libexif, openEuler:22.03-LTS-SP4: libexif, openEuler:24.03-LTS: libexif, openEuler:24.03-LTS-SP1: libexif, openEuler:24.03-LTS-SP2: libexif, openEuler:24.03-LTS-SP3: libexif

Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows you to parse an EXIF file and read the data from those tags. Security Fix(es):

In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.(CVE-2026-40385)

In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.(CVE-2026-40386)

openSUSE-SU-2026:10717-1 — libexif-devel-0.6.26-1.1 on GA media

libexif-devel-0.6.26-1.1 on GA media

RHSA-2026:26190 — Red Hat Security Advisory: libexif security update

libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding

RLSA-2026:22529 — Moderate: libexif security update

Affected: Rocky Linux:10: libexif

The libexif packages provide a library for extracting extra information from image files.

Security Fix(es):

* libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

SUSE-SU-2026:22324-1 — Security update for libexif

Security update for libexif

UBUNTU-CVE-2026-40386

Affected: Ubuntu:Pro:14.04:LTS: libexif, Ubuntu:16.04:LTS: libexif, Ubuntu:18.04:LTS: libexif, Ubuntu:20.04:LTS: libexif, Ubuntu:22.04:LTS: libexif, Ubuntu:24.04:LTS: libexif, Ubuntu:25.10: libexif, Ubuntu:26.04:LTS: libexif

In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.

WID-SEC-W-2026-1060 — libexif: Mehrere Schwachstellen ermöglichen Denial of Service und Offenlegung von Informationen

Ein lokaler Angreifer kann mehrere Schwachstellen in libexif ausnutzen, um einen Denial of Service Angriff durchzuführen oder vertrauliche Informationen offenzulegen.