Red Hat EUVD-2026-21732

libexif is a widely-used C library for parsing EXIF metadata embedded in image files. The vulnerability resides in the Nikon MakerNote parser, a Nikon-proprietary extension to EXIF that stores camera-specific metadata. An unsigned 32-bit integer overflow in this parser (CWE-190: Integer Overflow or Wraparound) occurs when processing specially crafted Nikon MakerNote data structures. On 32-bit systems, when unsigned integer arithmetic wraps around due to insufficient bounds checking, it can cause heap or stack buffer overflows, leading to memory corruption. The condition is limited to 32-bit platforms because 64-bit systems have a larger address space that may prevent the same overflow condition from producing exploitable memory layouts.