Summary
The libexif packages provide a library for extracting extra information from image files.
Security Fix(es):
* libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 10 | libexif | 0.6.24-9.el10_2.1 |
| AlmaLinux · 10 | libexif-devel | 0.6.24-9.el10_2.1 |
| AlmaLinux · 10 | libexif-doc | 0.6.24-9.el10_2.1 |
Vulnerabilities 1
-
Medium 4.0
In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used …