Описание
In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.
A flaw was found in libexif. An integer underflow vulnerability in the size checking mechanism for Fuji and Olympus MakerNote decoding could allow attackers to exploit programs using libexif. This could lead to a Denial of Service (DoS) by crashing the program or result in information disclosure, potentially exposing sensitive data.
Отчет
Moderate impact. An integer underflow in libexif's Fuji and Olympus MakerNote decoding could allow an attacker to cause a denial of service or information disclosure. This vulnerability affects programs that process specially crafted image files utilizing libexif.
Меры по смягчению последствий
To mitigate this issue, users should avoid processing untrusted image files with applications that utilize libexif. Restricting the source of image files to trusted origins can reduce the risk of exploitation.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | libexif | Out of support scope | ||
| Red Hat Enterprise Linux 10 | libexif | Fixed | RHSA-2026:22529 | 03.06.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | libexif | Fixed | RHSA-2026:26274 | 16.06.2026 |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | libexif | Fixed | RHSA-2026:26567 | 17.06.2026 |
| Red Hat Enterprise Linux 8 | libexif | Fixed | RHSA-2026:20929 | 26.05.2026 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | libexif | Fixed | RHSA-2026:26292 | 16.06.2026 |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | libexif | Fixed | RHSA-2026:26292 | 16.06.2026 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | libexif | Fixed | RHSA-2026:26191 | 16.06.2026 |
| Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | libexif | Fixed | RHSA-2026:26191 | 16.06.2026 |
| Red Hat Enterprise Linux 8.8 Telecommunications Update Service | libexif | Fixed | RHSA-2026:26190 | 16.06.2026 |
Показывать по
Дополнительная информация
Статус:
EPSS
4 Medium
CVSS3
Связанные уязвимости
In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.
In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.
In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.
In libexif through 0.6.25, an integer underflow in size checking for F ...
EPSS
4 Medium
CVSS3