Red Hat Security AdvisoryRHSA-2026:26192
libexif security update
Released 2026-06-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.4) libexif-0.6.22-6.el9_4.1
Fixes 2 records
Priority LOW 30
In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.0014 · Published 2026-04-12 · Partial fix CWE-191
Priority LOW 30
In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00094 · Published 2026-04-12 · Partial fix CWE-190
