GCVE-110-MAGEIA-2026-112

Advisory Published

Vulnetix · Advisory published May 7, 2026

CVE-2026-32775: libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow. CVE-2026-40385: In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems. CVE-2026-40386: In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	libexif	0 (affected), 0.6.26-1.mga9 (unaffected)	—

References

Updated libexif packages fix security vulnerabilities

advisory

Updated libexif packages fix security vulnerabilities

issue

Updated libexif packages fix security vulnerabilities

url

Browse GCVE Records

73,393 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON