Debian/libexif: high 7.1
In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.
Action: Upgrade libexif to 0.6.25-1+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.25-1+deb13u1 | - |
Fixed versions
| 0.6.25-1+deb13u1 |
Sources
- osv: DEBIAN-CVE-2026-40386#Debian:13/libexif
- https://security-tracker.debian.org/tracker/CVE-2026-40386
published · modified · JSON