Описание
In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.
A flaw was found in libexif. A local attacker on a 32-bit system could exploit an unsigned 32-bit integer overflow vulnerability in the Nikon MakerNote handling. This could lead to application crashes or the disclosure of sensitive information.
Отчет
This Moderate impact vulnerability in libexif affects 32-bit systems. A local attacker could trigger an integer overflow in the Nikon MakerNote handling, potentially leading to application crashes or information disclosure.
Меры по смягчению последствий
On 32-bit systems, avoid processing untrusted image files that contain Nikon MakerNotes. This operational control reduces the risk of exploitation by preventing vulnerable applications from parsing malicious EXIF data.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | libexif | Not affected | ||
| Red Hat Enterprise Linux 6 | libexif | Out of support scope | ||
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | libexif | Fixed | RHSA-2026:26567 | 17.06.2026 |
| Red Hat Enterprise Linux 8 | libexif | Fixed | RHSA-2026:20929 | 26.05.2026 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | libexif | Fixed | RHSA-2026:26292 | 16.06.2026 |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | libexif | Fixed | RHSA-2026:26292 | 16.06.2026 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | libexif | Fixed | RHSA-2026:26191 | 16.06.2026 |
| Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | libexif | Fixed | RHSA-2026:26191 | 16.06.2026 |
| Red Hat Enterprise Linux 8.8 Telecommunications Update Service | libexif | Fixed | RHSA-2026:26190 | 16.06.2026 |
| Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | libexif | Fixed | RHSA-2026:26190 | 16.06.2026 |
Показывать по
Дополнительная информация
Статус:
4 Medium
CVSS3
Связанные уязвимости
In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.
In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.
In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.
In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon ...
4 Medium
CVSS3