CVE-2026-40385_CVE-2026-40385

4 / 10

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

Description

In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.

Basic Information

ID CVE-2026-40385

Source mitre

Published Apr 12, 2026 at 18:16

Modified Apr 12, 2026 at 18:53

Affected Product

Vendor libexif project

Product libexif

Affected Versions libexif project libexif 0

CWE Classification

CWE-190

References

github.com /libexif/libexif/commit/93003b93e50b3d259bd2227d8775b73a53c35d58

{
    "lastseen": "",
    "description": "In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.",
    "published": "2026-04-12T18:16:30.420Z",
    "modified": "2026-04-12T18:53:59.608Z",
    "type": "cve",
    "title": "CVE-2026-40385",
    "source": "mitre",
    "references": "https://github.com/libexif/libexif/commit/93003b93e50b3d259bd2227d8775b73a53c35d58",
    "id": "CVE-2026-40385",
    "bulletinFamily": "",
    "cwe": [
        "CWE-190"
    ],
    "cvelist": null,
    "sourceData": "libexif project libexif 0",
    "sourceHref": "",
    "cvss": {
        "score": 4,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "libexif",
    "version": "0",
    "vendor": "libexif project",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}