Red Hat Security AdvisoryRHSA-2026:20929
libexif security update
Released 2026-05-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) libexif-0.6.22-6.el8_10
- Red Hat Enterprise Linux CRB (v. 8) libexif-devel-0.6.22-6.el8_10
Fixes 2 records
Priority LOW 30
In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.0014 · Published 2026-04-12 · Partial fix CWE-191
Priority LOW 30
In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00094 · Published 2026-04-12 · Partial fix CWE-190
