CVE-2026-36834

Summary An out-of-bounds array read exists in src/decoders/pana8.cpp. The function GetDBit can return the value 17 when no Huffman table match is found, but huffcoeff is declared with only 17 elements valid indices 0-16. This results in huffcoeff17 being accessed, triggering undefined behavior...

CLEANSTART-2024-EC70760 Stack-based Buffer Overflow was discovered in xtrans_interpolate in internal/dcraw_common

Security vulnerability affects the libraw package. A Stack-based Buffer Overflow was discovered in xtransinterpolate in internal/dcrawcommon...

CLEANSTART-2024-YO80148 There is a floating point exception in the kodak_radc_load_raw function in dcraw_common

Security vulnerability affects the libraw package. There is a floating point exception in the kodakradcloadraw function in dcrawcommon...

CLEANSTART-2024-BZ93374 error within the "parse_sinar_ia()" function (internal/dcraw_common

Security vulnerability affects the libraw package. An error within the "parsesinaria" function internal/dcrawcommon...

CLEANSTART-2024-TY76781 type confusion error within the "unpacked_load_raw()" function within LibRaw versions prior to 0

Security vulnerability affects the libraw package. A type confusion error within the "unpackedloadraw" function within LibRaw versions prior to 0...

CLEANSTART-2024-TJ96358 LibRaw::raw2image() in libraw_cxx

Security vulnerability affects the libraw package. LibRaw::raw2image in librawcxx...

CLEANSTART-2024-XX73049 LibRaw before 0

Security vulnerability affects the libraw package. LibRaw before 0...

CLEANSTART-2024-AT66972 In LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF()" function (libraw\src\metadata\sony

Security vulnerability affects the libraw package. In LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF" function libraw\src\metadata\sony...

CLEANSTART-2024-SS54646 In LibRaw, an out-of-bounds read vulnerability exists within the "simple_decode_row()" function (libraw\src\x3f\x3f_utils_patched

Security vulnerability affects the libraw package. In LibRaw, an out-of-bounds read vulnerability exists within the "simpledecoderow" function libraw\src\x3f\x3futilspatched...

CLEANSTART-2024-AJ42205 In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patched

Security vulnerability affects the libraw package. In LibRaw, there is an out-of-bounds write vulnerability within the "newnode" function libraw\src\x3f\x3futilspatched...

CLEANSTART-2024-AV14421 libraw 20

Security vulnerability affects the libraw package. libraw 20...

CLEANSTART-2024-SK50328 flaw was found in LibRaw

Security vulnerability affects the libraw package. A flaw was found in LibRaw...

Fedora 45 : mingw-LibRaw (2026-e8eb7f84bb)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e8eb7f84bb advisory. Backport fix for CVE-2026-88387. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

[SECURITY] Fedora 45 Update: libkdcraw-26.08.2-1.fc45

Libkdcraw is a C++ interface around LibRaw library used to decode RAW picture files. More information about LibRaw can be found at http://www.libraw.org...

LibRaw Heap Buffer Overflow DoS

The vulnerability in the losslessjpegloadraw function within the LibRaw image processing library is related to improper array indexing. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Fedora 44 : mingw-LibRaw (2026-550f098772)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-550f098772 advisory. Backport fix for CVE-2026-88387. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

SUSE SLED15 / SLES15 Security Update : libraw (SUSE-SU-2026:4829-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4829-1 advisory. This update for libraw fixes the following issue: - CVE-2026-88387: incorrect numeric conversion in LibRaw::parsetiffif...

Security update for libraw

This update for libraw fixes the following issue: CVE-2026-88387: incorrect numeric conversion in LibRaw::parsetiffifd when processing TIFF tag 0x00fe can lead to undefined behavior and a process crash when a specially crafted file is processed bsc1282783. Patch Instructions: To install this SUSE...

Security update for libraw

This update for libraw fixes the following issue: CVE-2026-88387: incorrect numeric conversion in LibRaw::parsetiffifd when processing TIFF tag 0x00fe can lead to undefined behavior and a process crash when a specially crafted file is processed bsc1282783. Patch Instructions: To install this SUSE...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: LibRaw (UTSA-2026-141775)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-141775 advisory. A heap-based buffer overflow vulnerability exists in the losslessjpegloadraw functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted malicious...