CVE-2026-40385 MEDIUM

CVE-2026-40385

Vendor Libexif Project

Product libexif

Weakness CWE-190

Published April 12, 2026

Last update April 14, 2026

View on NVD All CVEs

CVSS base score

4.0/10

Attack vector Local

Attack complexity High

Privileges required None

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

What the vulnerability does

01Description

In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.

Key dates

02Disclosure timeline

April 12, 2026 CVE published

April 14, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-40385 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/190.html

Related vulnerabilities

CVE-2026-40385

01Description

02Disclosure timeline

03References

04Related CVE