Medium ELSA-2026-22529 1 CVE

Moderate: libexif security update (Oracle Linux 10)

Published Jul 16, 2026 · Updated Jul 16, 2026

Ecosystem: Oracle Linux

Summary

[0.6.24-9.1]
- Fix integer underflow in MakerNote decoding (CVE-2026-40386)
Resolves: RHEL-170240

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 10	libexif	0:0.6.24-9.el10_2.1
Oracle Linux · 10	libexif-devel	0:0.6.24-9.el10_2.1
Oracle Linux · 10	libexif-doc	0:0.6.24-9.el10_2.1

Vulnerabilities 1

Medium 4.0

CVE-2026-40386

In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used …

libexif project libexif libexif libexif Debian Ubuntu Azure Linux Alpine

Apr 12, 2026