Red Hat Security Advisory: libexif security update

Fixed packages 4

Vulnerabilities 2

• Medium 4.0
  CVE-2026-40385

  In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attack…

  libexif project libexif libexif libexif Debian Ubuntu Azure Linux Alpine
  Apr 12, 2026
• Medium 4.0
  CVE-2026-40386

  In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used …

  libexif project libexif libexif libexif Debian Ubuntu Azure Linux Alpine
  Apr 12, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2457687
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2457689
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26567.json
• report
  https://access.redhat.com/security/cve/CVE-2026-40385
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-40385
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-40385
• article
  https://github.com/libexif/libexif/commit/93003b93e50b3d259bd2227d8775b73a53c35d58
• report
  https://access.redhat.com/security/cve/CVE-2026-40386
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-40386
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-40386
• article
  https://github.com/libexif/libexif/commit/dc6eac6e9655d14d0779d99e82d0f5f442d2f34b