ZeroDay Findings
Sign inSign up

Findings

CVE-2026-40386

In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of…

Published Apr 12, 2026 · updated Jun 17, 2026 · libexif project libexif

In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 12, 2026 · NIST NVD

    Detected

    In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.

  2. Jun 17, 2026 · NIST NVD

    Updated

    In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.

Affected

  • cpe libexif project/libexifversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-40386

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-40386

    In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.

    nvd.nist.gov

References