CVE-2026-36834

Summary An out-of-bounds array read exists in src/decoders/pana8.cpp. The function GetDBit can return the value 17 when no Huffman table match is found, but huffcoeff is declared with only 17 elements valid indices 0-16. This results in huffcoeff17 being accessed, triggering undefined behavior...

Astra Linux – Vulnerability in libraw

In LibRaw, there is a out-of-bounds read vulnerability within the “simpledecoderow” function libraw\src\x3f\x3futilspatched.cpp, which can be triggered by an image with a large rowstride field...

Astra Linux – Vulnerability in libraw

In LibRaw, there is a out-of-bounds read vulnerability within the “LibRaw::adobecopypixel” function libraw\src\decoders\dng.cpp when reading data from the image file...

Astra Linux – Vulnerability in libraw

In LibRaw before 0.21.4, the processing of tag 0x412 in phaseonecorrect in decoders/loadmfbacks.cpp does not enforce minimum w0 and w1 values...

Astra Linux – Vulnerability in libraw

LibRaw before 0.20-RC1 lacks a check for the thumbnail size range. This affects decoders/unpackthumb.cpp, postprocessing/memimage.cpp, and utils/thumbutils.cpp. For example, mallocsizeoflibrawprocessedimaget+T.tlength is used without validating T.tlength...

Astra Linux – Vulnerability in libraw

In LibRaw before 0.21.4, phaseonecorrect in decoders/loadmfbacks.cpp allows out-of-buffer access, because the values of splitcol and splitrow are not checked during the processing of the 0x041f tag...

Astra Linux – Vulnerability in libraw

Buffer overflow vulnerability in LibRaw Linux/unix v0.20.0 allows attackers to escalate privileges through the LibRawbufferdatastream::getschar, int function in /src/libraw/src/librawdatastream.cpp...

Astra Linux – Vulnerability in libraw

In LibRaw before 0.21.4, phaseonecorrect in decoders/loadmfbacks.cpp has out-of-bounds reads when processing tag 0x412, which is related to large values of w0 or w1, or the frac and mult calculations...

Astra Linux – Vulnerability in libraw

Buffer overflow vulnerability in the LibRaw::stretch function in libraw\src\postprocessing\aspectratio.cpp...

Important: Red Hat Security Advisory: LibRaw security update

An update for LibRaw is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

LibRaw: LibRaw: Buffer Overflow vulnerability in image processing

A flaw was found in LibRaw, an open-source library for processing raw image files. This vulnerability is a buffer overflow, which occurs in the stretch and fujirotate functions. A buffer overflow can allow an attacker to overwrite memory, potentially leading to a denial of service or the executio...

ROOT-OS-DEBIAN-13-CVE-2026-24660 CVE-2026-24660 in libraw - Patched by Root

Root has patched CVE-2026-24660 in the libraw package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-24450 CVE-2026-24450 in libraw - Patched by Root

Root has patched CVE-2026-24450 in the libraw package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-20911 CVE-2026-20911 in libraw - Patched by Root

Root has patched CVE-2026-20911 in the libraw package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-20889 CVE-2026-20889 in libraw - Patched by Root

Root has patched CVE-2026-20889 in the libraw package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-20884 CVE-2026-20884 in libraw - Patched by Root

Root has patched CVE-2026-20884 in the libraw package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-5342 CVE-2026-5342 in libraw - Patched by Root

Root has patched CVE-2026-5342 in the libraw package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-21413 CVE-2026-21413 in libraw - Patched by Root

Root has patched CVE-2026-21413 in the libraw package for Root:Debian:13. Multiple fixed versions available...

Astra Linux – Vulnerability in libraw

In LibRaw before 0.21.4, metadata/tiff.cpp has a out-of-bounds read in the Fujifilm 0xf00c tag parser...

Astra Linux – Vulnerability in libraw

A flaw was discovered in LibRaw. A heap-buffer-overflow in the raw2imageex function, caused by a maliciously crafted file, may lead to an application crash...