In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2026-40385.json"