2343 matches found
PT-2026-76152
A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...
PT-2026-76150
In LibRaw before 0.21.4, tag 0x412 processing in phase one correct in decoders/load mfbacks.cpp does not enforce minimum w0 and w1 values...
PT-2026-76145
In LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF" function librawsrcmetadatasony.cpp when processing srf files...
PT-2026-76155
A weakness has been identified in LibRaw up to 0.22.0. This impacts the function HuffTable::initval of the file src/decompressors/losslessjpeg.cpp of the component JPEG DHT Parser. This manipulation of the argument bits causes out-of-bounds write. It is possible to initiate the attack remotely. T...
PT-2026-76144
In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData" function librawsrcdecoderscrx.cpp when processing cr3 files...
PT-2026-76156
A flaw has been found in LibRaw up to 0.22.0. This affects the function LibRaw::nikon load padded packed raw of the file src/decoders/decoders libraw.cpp of the component TIFF/NEF. Executing a manipulation of the argument load flags/raw width can lead to out-of-bounds read. It is possible to laun...
CVE-2026-51235
A flaw was found in LibRaw, an open-source library for processing raw image files. This vulnerability is a buffer overflow, which occurs in the stretch and fujirotate functions. A buffer overflow can allow an attacker to overwrite memory, potentially leading to a denial of service or the executio...
[SECURITY] [DLA 4704-1] libraw security update
Debian LTS Advisory DLA-4704-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin July 29, 2026 https://wiki.debian.org/LTS Package : libraw Version : 0.20.2-1+deb11u3 0.20.2-2.1+deb12u2 CVE ID : CVE-2026-5342 CVE-2026-20884 CVE-2026-20889 CVE-2026-21413 CVE-2026-2466...
Debian dla-4704 : libraw-bin - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4704 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4704-1 [email protected]...
Linux Distros Unpatched Vulnerability : CVE-2026-51235
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibRaw 0.21 is vulnerable to Buffer Overflow in the stretch function src/librawcxx.cpp and fujirotate function src/decoders/fuji.cpp. CVE-2026-51235 Note that...
CVE-2026-51235
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
UBUNTU-CVE-2026-51235
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51235
LibRaw 0.21 contains a buffer overflow in the stretch() and fuji_rotate() functions. Red Hat’s advisory states the issue is a vulnerability in the LibRaw library that could allow memory overwrite, potentially leading to denial of service or unauthorized code execution. Mitigation: avoid processin...
EUVD-2026-49396
LibRaw 0.21 is vulnerable to Buffer Overflow in the stretch function src/librawcxx.cpp and fujirotate function src/decoders/fuji.cpp...
CVE-2026-51235
...
PT-2026-65084
Name of the Vulnerable Software and Affected Versions LibRaw version 0.21 Description Buffer overflow occurs in the stretch function src/libraw cxx.cpp and the fuji rotate function src/decoders/fuji.cpp. Recommendations At the moment, there is no information about a newer version that contains a...
CVE-2026-51235
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
Oracle Linux 9 : LibRaw (ELSA-2026-19345)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19345 advisory. 0.21.1-2 - Fix CVE-2026-21413 and CVE-2026-24450 Resolves: RHEL-165374, RHEL-165461 Tenable has extracted the preceding description block directly fro...
The vulnerability of the `nikon_load_padded_packed_raw()` function in the `src/decoders/decoders_libraw.cpp` file, which is part of the LibRaw image processing library, allows a hacker to trigger a service failure.
The vulnerability of the nikonloadpaddedpackedraw function in the src/decoders/decoderslibraw.cpp file, which is part of the LibRaw image processing library, relates to the situation where the operation’s output goes beyond the buffer boundaries in memory when processing the loadflags and rawwidt...