PT-2026-25617 · Libexif · Libexif

Breakingbad6 · Publicado 2026-01-01 · Atualizado 2026-05-12 · CVE-2026-32775

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libexif versions through 0.6.25

Description The software contains a flaw in decoding MakerNotes. Specifically, an integer underflow occurs within the exif mnote data get value function when it receives a size of 0, leading to a buffer overwrite.

Recommendations Update to a version of libexif newer than 0.6.25.

Correção

Integer Underflow

Enumeração de Fraquezas

CWE-191

Identificadores relacionados

CVE-2026-32775

OESA-2026-1678

OPENSUSE-SU-2026:10717-1

Produtos afetados

Libexif

Referências · 21

• https://github.com/libexif/libexif/commit/7df372e9d31d7c993a22b913c813a5f7ec4f3692 · Correção
• https://github.com/libexif/libexif/issues/247 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-40386 · Nota
• https://security-tracker.debian.org/tracker/CVE-2026-32775 · Aviso do Fabricante
• https://t.me/msrcreports/3428 · Publicação no Telegram
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2026-32775 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2033583703998566556 · Publicação no Twitter
• https://osv.dev/vulnerability/BELL-CVE-2026-32775 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2026:10717-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/OESA-2026-1678 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-32775 · Aviso do Fabricante
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1678 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-32775 · Nota de Segurança
• https://twitter.com/infoflowcloud/status/2033585721529827582 · Publicação no Twitter
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-32775 · Aviso do Fabricante