What’s Vulnerable › Vulnerabilities
CVE-2026-40385
- Severity: high (CVSS 7.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-04-12 · updated 2026-06-17
- Weakness: CWE-190
Description
In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.
Affected products
- libexif project libexif: through 0.6.25
References
Get alerted when CVE-2026-40385 or the next vulnerability affects your stack