CVE-2026-32775 Integer overflow in libexif
An integer underflow in libexif allows attackers to overwrite buffers via crafted EXIF data, potentially leading to code execution or crashes.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-32775?
CVE-2026-32775 is a high-severity vulnerability in libexif, published on 16 Mar 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow.
Weakness: CWE-191
Which versions are affected by CVE-2026-32775?
It affects 1 product.
Products include Libexif Project Libexif.
How do I fix CVE-2026-32775?
Upgrade to a fixed version.
Is CVE-2026-32775 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-32775 exists.
Other vulnerabilities in libexif
Sources
Also known as AZL-79862, BELL-CVE-2026-32775, DEBIAN-CVE-2026-32775, GHSA-pq8m-942f-68cv, JLSEC-2026-150, OESA-2026-1678 and 1 more.