CVE-2026-88387

LibRaw version 0.22.0 is vulnerable to an incorrect numeric conversion within the LibRaw::parse_tiff_ifd() function. When processing the TIFF tag 0x00fe (NewSubfileType), the parser fails to perform range validation before narrowing an attacker-controlled value to a signed int . A specially craft...