{"cves":["CVE-2026-40385","CVE-2026-40386"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[0.6.22-6]\n- Fix integer underflow in MakerNote decoding (CVE-2026-40386)\n- Fix integer overflow in Nikon MakerNote handling (CVE-2026-40385)\n  Resolves: RHEL-170243, RHEL-170220","id":"ELSA-2026-20929","ovalId":"oval:com.oracle.elsa:def:202620929","source":"oracle_linux","title":"ELSA-2026-20929:  libexif security update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2026-20929.html"}