CVE-2026-40386

Summary: CVE-2026-40386 affects libexif up to 0.6.25, caused by an integer underflow in size checking during Fuji and Olympus MakerNote decoding. This could allow a crash or leakage of information from programs using libexif. What’s affected: libexif library (versions ≤ 0.6.25) handling MakerNote...

libexif: unrestricted size in handling Canon EXIF MakerNote data can lead to consumption of large amounts of compute time

An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data...