Debian/libexif: high 7.1
In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.
Action: Upgrade libexif to 0.6.25-1+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.25-1+deb13u1 | - |
Fixed versions
| 0.6.25-1+deb13u1 |
Sources
- osv: DEBIAN-CVE-2026-40385#Debian:13/libexif
- https://security-tracker.debian.org/tracker/CVE-2026-40385
published · modified · JSON