CVE-2026-36834

Sommario Esiste una lettura di array fuori dai limiti in src/decoders/pana8.cpp. La funzione GetDBit può restituire il valore 17 quando non viene trovata una corrispondenza nella tabella di Huffman, ma huffcoeff è dichiarato con soli 17 elementi indici validi 0-16. Ciò comporta l'accesso a...

ROOT-OS-DEBIAN-13-CVE-2026-24450 CVE-2026-24450 in libraw - Patched by Root

Root has patched CVE-2026-24450 in the libraw package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-24660 CVE-2026-24660 in libraw - Patched by Root

Root has patched CVE-2026-24660 in the libraw package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-20889 CVE-2026-20889 in libraw - Patched by Root

Root has patched CVE-2026-20889 in the libraw package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-20911 CVE-2026-20911 in libraw - Patched by Root

Root has patched CVE-2026-20911 in the libraw package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-20884 CVE-2026-20884 in libraw - Patched by Root

Root has patched CVE-2026-20884 in the libraw package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-21413 CVE-2026-21413 in libraw - Patched by Root

Root has patched CVE-2026-21413 in the libraw package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-5342 CVE-2026-5342 in libraw - Patched by Root

Root has patched CVE-2026-5342 in the libraw package for Root:Debian:13. Multiple fixed versions available...

Astra Linux – Vulnerability in libraw

In LibRaw before 0.21.4, the processing of tag 0x412 in phaseonecorrect in decoders/loadmfbacks.cpp does not enforce minimum w0 and w1 values...

Astra Linux – Vulnerability in libraw

In LibRaw, there is a out-of-bounds read vulnerability within the “simpledecoderow” function libraw\src\x3f\x3futilspatched.cpp, which can be triggered by an image with a large rowstride field...

Astra Linux – Vulnerability in libraw

In LibRaw, there is a out-of-bounds read vulnerability within the “LibRaw::adobecopypixel” function libraw\src\decoders\dng.cpp when reading data from the image file...

Astra Linux – Vulnerability in libraw

Buffer overflow vulnerability in LibRaw Linux/unix v0.20.0 allows attackers to escalate privileges through the LibRawbufferdatastream::getschar, int function in /src/libraw/src/librawdatastream.cpp...

Astra Linux – Vulnerability in libraw

In LibRaw before 0.21.4, phaseonecorrect in decoders/loadmfbacks.cpp has out-of-bounds reads when processing tag 0x412, which is related to large values of w0 or w1, or the frac and mult calculations...

Astra Linux – Vulnerability in libraw

LibRaw before 0.20-RC1 lacks a check for the thumbnail size range. This affects decoders/unpackthumb.cpp, postprocessing/memimage.cpp, and utils/thumbutils.cpp. For example, mallocsizeoflibrawprocessedimaget+T.tlength is used without validating T.tlength...

Astra Linux – Vulnerability in libraw

In LibRaw before 0.21.4, phaseonecorrect in decoders/loadmfbacks.cpp allows out-of-buffer access, because the values of splitcol and splitrow are not checked during the processing of the 0x041f tag...

RHSA-2026:51105 Red Hat Security Advisory: LibRaw security update

Bulletin has no description...

RLSA-2026:51105 Important: LibRaw security update

LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. Security Fixes: LibRaw: LibRaw: Buffer Overflow vulnerability in image processing CVE-2026-51235 For more details about the security issues, including the impact, a CVSS score,...

LibRaw security update

An update is available for LibRaw. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list LibRaw is a library for reading RAW files obtained from digital photo cameras...

Important: Red Hat Security Advisory: LibRaw security update

An update for LibRaw is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

LibRaw: LibRaw: Buffer Overflow vulnerability in image processing

A flaw was found in LibRaw, an open-source library for processing raw image files. This vulnerability is a buffer overflow, which occurs in the stretch and fujirotate functions. A buffer overflow can allow an attacker to overwrite memory, potentially leading to a denial of service or the executio...