PT-2026-25617 · Libexif · Libexif

Breakingbad6 · Published 2026-03-16 · Updated 2026-03-16 · CVE-2026-32775

X.com · Cvenew

CVSS v3.1

7.4

7.4

High

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2026-32775 libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif mnote data get value function gets passed in a 0 size, the passed in-buffer would be overwritten… https://t.co/u0dUgjw3Gq

Fix

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

CVE-2026-32775

Affected Products

Libexif

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-32775 · Security Note
• https://github.com/libexif/libexif/commit/7df372e9d31d7c993a22b913c813a5f7ec4f3692 · Note
• https://github.com/libexif/libexif/issues/247 · Note
• https://twitter.com/CVEnew/status/2033583703998566556 · Twitter Post
• https://twitter.com/infoflowcloud/status/2033585721529827582 · Twitter Post