Libexif Project vulnerabilities
We track 3 vulnerabilities in Libexif Project products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 12, 2026.
Latest Libexif Project vulnerabilities
- 7.1 High severity
libexif: Integer Underflow (Wrap or Wraparound)
In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.
- 7.1 High severity
libexif: Integer Overflow or Wraparound
In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.
- 7.8 High severity
libexif: Integer Underflow (Wrap or Wraparound)
libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow.