Most recent entries from all

ALSA-2026:11360 — Important: LibRaw security update

Affected: AlmaLinux:9: LibRaw, AlmaLinux:9: LibRaw-devel

LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).

Security Fix(es):

* LibRaw: LibRaw: Arbitrary code execution via a specially crafted malicious file (CVE-2026-24450) * LibRaw: LibRaw: Arbitrary code execution via heap-based buffer overflow in lossless JPEG loading (CVE-2026-21413)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

EUVD-2026-337502

fkie_cve-2026-21413

A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

GHSA-g53g-r75r-95g5

OESA-2026-2738 — LibRaw security update

Affected: openEuler:22.03-LTS-SP4: LibRaw

LibRaw is a library for reading RAW files from digital photo cameras (CRW/CR2, NEF, RAF, etc, virtually all RAW formats are supported).It pays special attention to correct retrieval of data required for subsequent RAW conversion.The library is intended for embedding in RAW converters, data analyzers, and other programs using RAW files as the initial data. Security Fix(es):

An integer overflow vulnerability exists in the deflate_dng_load_raw functionality of LibRaw. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.(CVE-2026-20884)

A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.(CVE-2026-20889)

A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw. A specially crafted malicious file can lead to a heap buffer overflow, causing memory corruption. This vulnerability affects specific commit versions.(CVE-2026-20911)

A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.(CVE-2026-21413)

A heap-based buffer overflow vulnerability exists in the x3f_load_huffma…

openSUSE-SU-2026:10565-1 — libraw-devel-0.22.1-1.1 on GA media

libraw-devel-0.22.1-1.1 on GA media

RHSA-2026:13860 — Red Hat Security Advisory: LibRaw security update

LibRaw: LibRaw: Arbitrary code execution via heap-based buffer overflow in lossless JPEG loading

SUSE-SU-2026:21360-1 — Security update for libraw

Security update for libraw

UBUNTU-CVE-2026-21413

Affected: Ubuntu:Pro:16.04:LTS: libraw, Ubuntu:16.04:LTS: darktable, Ubuntu:16.04:LTS: dcraw, Ubuntu:Pro:16.04:LTS: digikam, Ubuntu:16.04:LTS: exactimage, Ubuntu:16.04:LTS: kodi, Ubuntu:16.04:LTS: rawtherapee, Ubuntu:16.04:LTS: ufraw, Ubuntu:Pro:18.04:LTS: libraw, Ubuntu:18.04:LTS: darktable and 41 more

WID-SEC-W-2026-1298 — Red Hat Enterprise Linux (LibRaw): Mehrere Schwachstellen ermöglichen Codeausführung oder DoS

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial-of-Service-Zustand zu verursachen.