Summary
The libexif packages provide a library for extracting extra information from image files.
Security Fix(es):
* libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 10 | libexif | 0:0.6.24-9.el10_2.1 |
Vulnerabilities 1
-
Medium 4.0
In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used …
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2457689