In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.
| Vendor | Product | Versions |
|---|---|---|
| libexif | libexif | 0 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| open source | libexif | cert_advisory | 90% |
Updated severity to CRITICAL, marked as actively exploited, and corrected exploit availability to false.
Initial creation
