CVE-2026-40386

7.1 highEPSS 0.1%

High (7.1) in libexif project libexif. EPSS 0.1% chance of exploitation in the next 30 days.

In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.

Severity

CVSS 3.1

7.1 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-31)
CWE: CWE-191
Published: 2026-04-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

libexif_project:libexif

References

https://github.com/libexif/libexif/commit/dc6eac6e9655d14d0779d99e82d0f5f442d2f34b

Check your stack JSON