The libexif library versions through 0.6.25 contain a vulnerability classified as CWE-190 (Integer Overflow or Wraparound) in the processing of Nikon MakerNote metadata. Specifically, on 32-bit systems, an unsigned 32-bit integer overflow can be induced by local attackers, potentially causing crashes or leaking information. The vulnerability requires local access and has high attack complexity with no privileges required and no user interaction needed. The impact is limited to confidentiality and availability with no integrity impact. There is no vendor advisory or patch currently available.

Local attackers on 32-bit systems can exploit this integer overflow vulnerability to cause application crashes or leak information when processing Nikon MakerNote data in libexif. The impact affects confidentiality and availability but does not affect integrity. The vulnerability does not apply to 64-bit systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users on 32-bit systems should consider limiting local access to vulnerable applications that use libexif or avoid processing untrusted Nikon MakerNote metadata. No official patch or workaround has been provided by the vendor at this time.