CVE-2026-32775
libexif through 0.6.25 has a flaw in decoding MakerNotes.
Published Mar 16, 2026 · updated Jun 17, 2026 · libexif project libexif
libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Mar 16, 2026 · NIST NVD
Detected
libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow.
Jun 17, 2026 · NIST NVD
Updated
libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow.
Affected
- cpe libexif project/libexifversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-32775
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-32775
libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow.
nvd.nist.gov