CVE-2026-36834

Summary An out-of-bounds array read exists in src/decoders/pana8.cpp. The function GetDBit can return the value 17 when no Huffman table match is found, but huffcoeff is declared with only 17 elements valid indices 0-16. This results in huffcoeff17 being accessed, triggering undefined behavior...

Fedora 44 : mingw-LibRaw (2026-550f098772)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-550f098772 advisory. Backport fix for CVE-2026-88387. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

SUSE SLED15 / SLES15 Security Update : libraw (SUSE-SU-2026:4829-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4829-1 advisory. This update for libraw fixes the following issue: - CVE-2026-88387: incorrect numeric conversion in LibRaw::parsetiffif...

Security update for libraw

This update for libraw fixes the following issue: CVE-2026-88387: incorrect numeric conversion in LibRaw::parsetiffifd when processing TIFF tag 0x00fe can lead to undefined behavior and a process crash when a specially crafted file is processed bsc1282783. Patch Instructions: To install this SUSE...

Security update for libraw

This update for libraw fixes the following issue: CVE-2026-88387: incorrect numeric conversion in LibRaw::parsetiffifd when processing TIFF tag 0x00fe can lead to undefined behavior and a process crash when a specially crafted file is processed bsc1282783. Patch Instructions: To install this SUSE...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: LibRaw (UTSA-2026-141775)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-141775 advisory. A heap-based buffer overflow vulnerability exists in the losslessjpegloadraw functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted malicious...

SUSE CVE-2026-111272

LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image...

EUVD-2026-102527

LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image...

UBUNTU-CVE-2026-111272

LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image...

Linux Distros Unpatched Vulnerability : CVE-2026-111272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote that allows attackers to read past a short ShotInfo buffer...

CVE-2026-111272

A flaw was found in LibRaw. A heap-based out-of-bounds read vulnerability occurs in the Nikon metadata parser when handling image files with malformed tag data. An attacker could exploit this issue by convincing a user or automated process to decode a specially crafted Nikon image file, causing...

AZL-108254 CVE-2026-111272 affecting package LibRaw 0.21.3-1

LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image...

DEBIAN-CVE-2026-111272

LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image...

CVE-2026-111272

LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image...

CVE-2026-111272

LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image...

CVE-2026-111272 LibRaw through 0.22.2 Heap Out-of-Bounds Read via parseNikonMakernote ShotInfo

LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image...

CVE-2026-111272

LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image...

CVE-2026-111272 LibRaw through 0.22.2 Heap Out-of-Bounds Read via parseNikonMakernote ShotInfo

LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image...

CVE-2026-111272 LibRaw through 0.22.2 Heap Out-of-Bounds Read via parseNikonMakernote ShotInfo

LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image...

CVE-2026-111272

The LibRaw library (versions through 0.22.2 ) is vulnerable to a heap-based out-of-bounds read within the LibRaw::parseNikonMakernote() function. An attacker can trigger this by providing a crafted Nikon NEF/TIFF image containing a 5-byte ShotInfo tag that declares version 243. This flaw allows t...