{"cves":["CVE-2026-40385","CVE-2026-40386"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[0.6.22-6.1]\n- Fix integer underflow in MakerNote decoding (CVE-2026-40386)\n- Fix integer overflow in Nikon MakerNote handling (CVE-2026-40385)\n  Resolves: RHEL-170253, RHEL-170234","id":"ELSA-2026-22553","ovalId":"oval:com.oracle.elsa:def:202622553","source":"oracle_linux","title":"ELSA-2026-22553:  libexif security update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2026-22553.html"}