CLSA-2026-1787305055
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787305055.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1787305055
- Upstream
- Published
- 2026-08-21T09:37:47Z
- Modified
- 2026-10-26T09:31:47Z
- Summary
- Fix CVE(s): CVE-2026-32775, CVE-2026-40385, CVE-2026-40386
- Details
-
- SECURITY UPDATE: out-of-bounds write in MakerNote value formatting
- debian/patches/CVE-2026-32775.patch: reject maxlen == 0 before the maxlen-- underflow in mnote_canon_entry_get_value(), mnote_fuji_entry_get_value(), mnote_olympus_entry_get_value() and mnote_pentax_entry_get_value().
- CVE-2026-32775
- SECURITY UPDATE: integer overflow when reading Nikon MakerNotes
- debian/patches/CVE-2026-40385.patch: bound the offset read from the MakerNote before adding it to datao in exif_mnote_data_olympus_load(), which could wrap on 32-bit size_t and lead to out-of-bounds reads.
- CVE-2026-40385
- SECURITY UPDATE: unsigned integer underflow in MakerNote tag lookup
- debian/patches/CVE-2026-40386.patch: use "i >= n->count" instead of "i > n->count - 1" in exif_mnote_data_fuji_get_value() and exif_mnote_data_olympus_get_value(), which underflowed when count was 0.
- CVE-2026-40386
- SECURITY UPDATE: out-of-bounds write in MakerNote value formatting
- References
Affected packages
TuxCare:Ubuntu:18.04 / libexif-dev
Package
- Name
- libexif-dev
- Purl
- pkg:deb/tuxcare/libexif-dev?distro=ubuntu-18.04
TuxCare:Ubuntu:18.04 / libexif-doc
Package
- Name
- libexif-doc
- Purl
- pkg:deb/tuxcare/libexif-doc?distro=ubuntu-18.04