https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:04:05.218540+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:13284 ALSA-2026:13284 — Important: LibRaw security update 2026-10-02T10:04:05.426937+00:00

Affected: AlmaLinux:8: LibRaw, AlmaLinux:8: LibRaw-devel

LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).

Security Fix(es):

* LibRaw: LibRaw: Memory Corruption via Malicious File Processing (CVE-2026-24660) * LibRaw: LibRaw: Arbitrary code execution via heap-based buffer overflow in lossless JPEG loading (CVE-2026-21413) * LibRaw: LibRaw: Arbitrary code execution via specially crafted image file (CVE-2026-20889)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/euvd-2026-337466 EUVD-2026-337466 2026-10-02T10:04:05.427004+00:00 EUVD-2026-337466 https://cve.radiocsirt.org/vuln/fkie_cve-2026-24660 fkie_cve-2026-24660 2026-10-02T10:04:05.427021+00:00

A heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-6mmg-qj2r-7jcf GHSA-6mmg-qj2r-7jcf 2026-10-02T10:04:05.427045+00:00

A heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

 https://cve.radiocsirt.org/vuln/oesa-2026-2738 OESA-2026-2738 — LibRaw security update 2026-10-02T10:04:05.427059+00:00

Affected: openEuler:22.03-LTS-SP4: LibRaw

LibRaw is a library for reading RAW files from digital photo cameras (CRW/CR2, NEF, RAF, etc, virtually all RAW formats are supported).It pays special attention to correct retrieval of data required for subsequent RAW conversion.The library is intended for embedding in RAW converters, data analyzers, and other programs using RAW files as the initial data. Security Fix(es):

An integer overflow vulnerability exists in the deflate_dng_load_raw functionality of LibRaw. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.(CVE-2026-20884)

A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.(CVE-2026-20889)

A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw. A specially crafted malicious file can lead to a heap buffer overflow, causing memory corruption. This vulnerability affects specific commit versions.(CVE-2026-20911)

A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.(CVE-2026-21413)

A heap-based buffer overflow vulnerability exists in the x3f_load_huffma…

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10565-1 openSUSE-SU-2026:10565-1 — libraw-devel-0.22.1-1.1 on GA media 2026-10-02T10:04:05.427097+00:00

libraw-devel-0.22.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:15924 RHSA-2026:15924 — Red Hat Security Advisory: LibRaw security update 2026-10-02T10:04:05.427118+00:00

LibRaw: LibRaw: Memory Corruption via Malicious File Processing

 https://cve.radiocsirt.org/vuln/suse-su-2026:21360-1 SUSE-SU-2026:21360-1 — Security update for libraw 2026-10-02T10:04:05.427133+00:00

Security update for libraw

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-24660 UBUNTU-CVE-2026-24660 2026-10-02T10:04:05.427150+00:00

Affected: Ubuntu:Pro:16.04:LTS: libraw, Ubuntu:16.04:LTS: darktable, Ubuntu:16.04:LTS: dcraw, Ubuntu:Pro:16.04:LTS: digikam, Ubuntu:16.04:LTS: exactimage, Ubuntu:16.04:LTS: kodi, Ubuntu:16.04:LTS: rawtherapee, Ubuntu:16.04:LTS: ufraw, Ubuntu:Pro:18.04:LTS: libraw, Ubuntu:18.04:LTS: darktable and 41 more

A heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1439 WID-SEC-W-2026-1439 — Red Hat Enterprise Linux (LibRaw): Schwachstelle ermöglicht Codeausführung 2026-10-02T10:04:05.427224+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (LibRaw) ausnutzen, um beliebigen Programmcode auszuführen.