CVE-2026-40385

CVE-2026-40385 affects libexif up to 0.6.25, with an unsigned 32‑bit overflow in Nikon MakerNote handling on 32‑bit systems that can lead to crashes or information disclosure. Connected advisories confirm availability of fixes (e.g., Debian LTS advisory fixing to a newer libexif version; other ad...

Linux Distros Unpatched Vulnerability : CVE-2026-40385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks...

PT-2026-32180

Name of the Vulnerable Software and Affected Versions libexif versions through 0.6.25 Description A flaw exists in libexif that involves an unsigned 32bit integer overflow when handling Nikon MakerNote data. This issue can lead to crashes or information leaks. The issue is limited to 32bit system...

CVE-2026-40386: Integer Underflow (Wrap or Wraparound)

In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs...

CVE-2026-40385: Integer Overflow or Wraparound

In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems...

Libexif numerical error vulnerability

Libexif is a function library written in C language by the Libexif organization. This product is primarily used for reading and writing EXIF meta-data from graphic files. Versions of libexif prior to 0.6.25 contained a numerical error vulnerability. This vulnerability stemmed from integer underfl...

Libexif input validation error vulnerability

Libexif is a function library written in C language by the Libexif organization. This product is primarily used for reading and writing EXIF metadata from graphic files. Versions of Libexif prior to 0.6.25 contained a vulnerability related to input validation errors. This vulnerability stemmed fr...

Linux Distros Unpatched Vulnerability : CVE-2026-40386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information...

PT-2026-32181

Name of the Vulnerable Software and Affected Versions libexif versions through 0.6.25 Description An integer underflow in size checking during the decoding of Fuji and Olympus MakerNote data within libexif could allow attackers to cause a crash or leak information from programs that use libexif...

libraw:libraw_cr2_fuzzer: Use-of-uninitialized-value in LibRaw::parseOlympus_Equipment

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5632816980492288 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

MiracleLinux 8 : libexif-0.6.21-17.el8 (AXSA:2020-249:03)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-249:03 advisory. libexif: several buffer over-reads in EXIF MakerNote handling can lead to information disclosure and DoS CVE-2020-13112 Tenable has extracted the preceding...

MiracleLinux 7 : libexif-0.6.21-7.el7 (AXSA:2020-162:02)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-162:02 advisory. libexif: several buffer over-reads in EXIF MakerNote handling can lead to information disclosure and DoS CVE-2020-13112 Tenable has extracted the preceding...

MiracleLinux 4 : libexif-0.6.21-6.AXS4 (AXSA:2020-137:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-137:01 advisory. libexif: several buffer over-reads in EXIF MakerNote handling can lead to information disclosure and DoS CVE-2020-13112 Tenable has extracted the preceding...

EUVD-2020-5388

Malware in sbrugna...

EUVD-2020-5389

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2018-20337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a stack-based buffer overflow in the parsemakernote function of dcrawcommon.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or...

imagemagick:ping_fuzzer: Use-of-uninitialized-value in LibRaw::parse_makernote_ADDRESS

Detailed Report: https://oss-fuzz.com/testcase?key=6635714710667264 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::parsemakernoteADDRESS...

imagemagick:encoder_dng_fuzzer: Crash in libraw_sget4_static

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5096158423744512 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

metadata-extractor:ImageMetadataReaderFuzzer: Security exception in com.drew.imaging.tiff.TiffReader.processIfd

Project: https://github.com/drewnoakes/metadata-extractor.git Detailed Report: https://oss-fuzz.com/testcase?key=4507497474686976 Project: metadata-extractor Fuzzing Engine: libFuzzer Fuzz Target: ImageMetadataReaderFuzzer Job Type: libfuzzerasanmetadata-extractor Platform Id: linux Crash Type:...

PT-2023-35704 · Libraw · Libraw

Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: The issue is related to a crash in LibRaw, specifically in the LibRaw::sget4 function, which is called by LibRaw::parseAdobeRAFMakernote and LibRaw::parse tiff ifd. The crash type is reporte...