Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Azure libexif can crash or leak data on 32‑bit systems
published 6 months ago
Summary
The libexif library used in Azure environments can mishandle certain Nikon camera data on 32‑bit computers, leading to a calculation mistake that may cause the program to stop working or expose information. This problem only affects 32‑bit systems running versions earlier than 0.6.24‑3. Update libexif to the newest version or apply any patches provided by the vendor to eliminate the risk.
What to do
- Update azure libexif to version 0.6.24-3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | libexif |
< 0.6.24-3 Fix: upgrade to 0.6.24-3
|
Original advisory text
CVE-2026-40385 affecting package libexif for versions less than 0.6.24-3
In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.
References
Timeline
Published12 Apr 2026
Updated23 Sep 2026
First seen23 Sep 2026
Sources
AZL-82685 · OSV
Track software like this
Free during beta