CVE-2026-40385CWE-190

In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information…

Medium · published April 12, 2026

CVSS v3.1
4.0
EPSS
0%
Percentile
2.0
In the wild
Unconfirmed
What it is

In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.

The record
Technical detail
CVSS v3.1
4.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00125 · 2.0th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2026-04-12T18:16Z
EPSS history
Timeline
  • 12 APR 18:16Z
    In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information…
    cvelistv5