Skip to main content

EUVD-2026-12345

| CVE-2026-32775 HIGH
Integer Underflow (CWE-191)
2026-03-16 mitre
Information Disclosure Integer Overflow
7.4
CVSS 3.1
Share

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

5
Analysis Updated
Apr 21, 2026 - 14:15 vuln.today
v1 (cvss_changed)
Re-analysis Queued
Apr 21, 2026 - 14:07 vuln.today
cvss_changed
EUVD ID Assigned
Mar 16, 2026 - 07:00 euvd
EUVD-2026-12345
Analysis Generated
Mar 16, 2026 - 07:00 vuln.today
CVE Published
Mar 16, 2026 - 06:31 nvd
HIGH 7.4

DescriptionNVD

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow.

AnalysisAI

Integer underflow in libexif 0.6.25 and earlier allows local attackers to overwrite memory via crafted MakerNote EXIF data in image files. The flaw occurs when exif_mnote_data_get_value receives a zero-size parameter, triggering a buffer overflow that can lead to arbitrary code execution or information disclosure. …

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

Within 24 hours: Identify all systems and applications using libexif 0.6.25 or earlier (check package managers and application dependencies). Within 7 days: Update libexif to version 0.6.26 or later and rebuild dependent applications; prioritize systems processing untrusted image inputs. …

Sign in for detailed remediation steps.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

Vendor StatusVendor

Share

EUVD-2026-12345 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy