In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.
CVSS Details
- CVSS 3.1 Base Score: 4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libexif-develUpgrade libexif | May 27, 2026 | May 26, 2026 |
| Alpine Linux | — | Upgrade libexif | Apr 29, 2026 | Apr 12, 2026 |
| Debian | — | Upgrade libexif | May 3, 2026 | May 3, 2026 |
| Oracle_linux | — | Upgrade libexifUpgrade libexif-devel | May 29, 2026 | Apr 12, 2026 |
| Redhat_linux | — | Upgrade libexif-docUpgrade libexifUpgrade libexif-debugsourceUpgrade libexif-develNo solution existsUpgrade libexif-debuginfo | May 28, 2026 | Apr 12, 2026 |
| Rocky_linux | — | Upgrade libexifUpgrade libexif-docUpgrade libexif-develUpgrade libexif-debugsourceUpgrade libexif-debuginfo | Jun 1, 2026 | May 29, 2026 |
| Ubuntu | — | Upgrade libexif12 | Jul 13, 2026 | Apr 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub