WonderLanternZ7

WonderLantern Z7 lab EXPERIMENTAL CAMERA FIRMWARE RESEARCH. A failed or incorrect flash can permanently brick a camera, destroy data, or require paid repair/replacement. Use entirely at your own risk. To the fullest extent permitted by law, the authors/contributors accept no liability. No warrant...

SUSE CVE-2026-111272

LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image...

EUVD-2026-102527

LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image...

UBUNTU-CVE-2026-111272

LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image...

Linux Distros Unpatched Vulnerability : CVE-2026-111272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote that allows attackers to read past a short ShotInfo buffer...

CVE-2026-111272

A flaw was found in LibRaw. A heap-based out-of-bounds read vulnerability occurs in the Nikon metadata parser when handling image files with malformed tag data. An attacker could exploit this issue by convincing a user or automated process to decode a specially crafted Nikon image file, causing...

DEBIAN-CVE-2026-111272

LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image...

CVE-2026-111272

LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image...

Red Hat: CVE-2026-111272: LibRaw: LibRaw: Denial of Service via heap-based out-of-bounds read in Nikon metadata parser

LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image...

Libraw buffer error vulnerability

Libraw versions 0.22.2 and earlier have a buffer error vulnerability. This vulnerability stems from a stack-based out-of-bounds read in LibRaw::parseNikonMakernote. An attacker could provide a custom Nikon NEF/TIFF file with a 5-byte ShotInfo tag labeled with version 243. By reading the...

Rocky Linux 8 [CIQ] Security Update: libexif / libexif-debuginfo / libexif-debugsource / libexif-devel Multiple Vulnerabilities (crlsa-2026_20929)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202620929 advisory. libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling CVE-2026-40385 libexif: libexif: Denial of Service a...

CLSA-2026-1787932207 Fix CVE(s): CVE-2020-18771, CVE-2026-25884, CVE-2026-27596

SECURITY UPDATE: out-of-bounds read in the Nikon MakerNote printer - debian/patches/CVE-2020-18771.patch: bound the nikonFocusarea index in Nikon1MakerNote::print0x0088 with EXVCOUNTOF, so a crafted MakerNote cannot make the printer read a pointer from past the end of the table upstream 5e6c2855c...

JLSEC-2026-1118

A flaw has been found in LibRaw up to 0.22.0. This affects the function LibRaw::nikonloadpaddedpackedraw of the file src/decoders/decoderslibraw.cpp of the component TIFF/NEF. Executing a manipulation of the argument loadflags/rawwidth can lead to out-of-bounds read. It is possible to launch the...

Debian dla-4704 : libraw-bin - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4704 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4704-1 [email protected]...

MiracleLinux 9 : libexif-0.6.22-6.el9_8.1 (AXSA:2026-1294:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1294:03 advisory. libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling CVE-2026-40385 libexif: libexif: Denial of...

LibRaw Heap Buffer Overflow DoS

The vulnerability of the nikonloadpaddedpackedraw function in the src/decoders/decoderslibraw.cpp file, which is part of the LibRaw image processing library, relates to the situation where the operation’s output goes beyond the buffer boundaries in memory when processing the loadflags and rawwidt...

USN-8531-1 libexif vulnerabilities

It was discovered that libexif had an integer overflow in its MakerNote decoder when called with a zero-length buffer. An attacker could possibly use this issue to cause a denial of service or obtain sensitive information. CVE-2026-32775 It was discovered that libexif had an integer overflow in i...

USN-8531-1: libexif vulnerabilities

It was discovered that libexif had an integer overflow in its MakerNote decoder when called with a zero-length buffer. An attacker could possibly use this issue to cause a denial of service or obtain sensitive information. CVE-2026-32775 It was discovered that libexif had an integer overflow in i...

SUSE SLED15 / SLES15 Security Update : libexif (SUSE-SU-2026:2837-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2837-1 advisory. This update for libexif fixes the following issues - CVE-2026-40385: Fixed information disclosure and crashes...

Security update for libexif

This update for libexif fixes the following issues CVE-2026-40385: Fixed information disclosure and crashes via integer overflow in Nikon MakerNote handling bsc1262000 CVE-2026-40386: Fixed denial of service and information disclosure via integer underflow in MakerNote decoding bsc1262001...