EUVD-2026-86473

LibRaw 0.22.0 contains an incorrect numeric conversion vulnerability in LibRaw::parsetiffifd when processing TIFF tag 0x00fe NewSubfileType. A specially crafted RAW, TIFF, or DNG file can supply an attacker-controlled NewSubfileType value outside the range of a signed int. The parser converts thi...

CVE-2026-88387

LibRaw version 0.22.0 is vulnerable to an incorrect numeric conversion within the LibRaw::parse_tiff_ifd() function. When processing the TIFF tag 0x00fe (NewSubfileType), the parser fails to perform range validation before narrowing an attacker-controlled value to a signed int . A specially craft...

imagemagick/encoder_dng_fuzzer: Global-buffer-overflow in LibRaw::parse_makernote

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5733147803648000 Project: imagemagick Fuzzer: aflimagemagickencoderdngfuzzer Fuzz target binary: encoderdngfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

imagemagick/ping_dng_fuzzer: Use-of-uninitialized-value in LibRaw_buffer_datastream::seek

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5631450131988480 Project: imagemagick Fuzzer: libFuzzerimagemagickpingdngfuzzer Fuzz target binary: pingdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::parse_tiff_ifd

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6488155063582720 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdngfuzzer Fuzz target binary: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...