CVE-2026-32775

Опубликовано: 16 мар. 2026

Источник: nvd

CVSS3: 7.4

CVSS3: 7.8

EPSS Низкий

Описание

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow.

Ссылки

https://github.com/libexif/libexif/commit/7df372e9d31d7c993a22b913c813a5f7ec4f3692
Patch
https://github.com/libexif/libexif/issues/247
Exploit
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libexif_project:libexif:*:*:*:*:*:*:*:*

Версия до 0.6.25 (включая)

EPSS

Процентиль: 9%

0.00193

Низкий

7.4 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-191

Связанные уязвимости

CVE-2026-32775

CVSS3: 7.4

ubuntu

5 месяцев назад

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow.

CVE-2026-32775

CVSS3: 5.3

redhat

5 месяцев назад

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow.

CVE-2026-32775

CVSS3: 7.4

msrc

5 месяцев назад

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow.

CVE-2026-32775

CVSS3: 7.4

debian

5 месяцев назад

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_ ...

ROS-20260713-73-0007

CVSS3: 7.8

redos

20 дней назад

Уязвимость libexif

EPSS

Процентиль: 9%

0.00193

Низкий

7.4 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-191