Most recent entries from all

ALSA-2026:11360 — Important: LibRaw security update

Affected: AlmaLinux:9: LibRaw, AlmaLinux:9: LibRaw-devel

LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).

Security Fix(es):

* LibRaw: LibRaw: Arbitrary code execution via a specially crafted malicious file (CVE-2026-24450) * LibRaw: LibRaw: Arbitrary code execution via heap-based buffer overflow in lossless JPEG loading (CVE-2026-21413)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

EUVD-2026-290556

fkie_cve-2026-24450

An integer overflow vulnerability exists in the uncompressed_fp_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

GHSA-rhmw-w7w3-c647

OESA-2026-2739 — LibRaw security update

Affected: openEuler:24.03-LTS-SP1: LibRaw

LibRaw is a library for reading RAW files from digital photo cameras (CRW/CR2, NEF, RAF, etc, virtually all RAW formats are supported).It pays special attention to correct retrieval of data required for subsequent RAW conversion.The library is intended for embedding in RAW converters, data analyzers, and other programs using RAW files as the initial data. Security Fix(es):

An integer overflow vulnerability exists in the deflate_dng_load_raw functionality of LibRaw. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.(CVE-2026-20884)

A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.(CVE-2026-20889)

A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw. A specially crafted malicious file can lead to a heap buffer overflow, causing memory corruption. This vulnerability affects specific commit versions.(CVE-2026-20911)

A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.(CVE-2026-21413)

An integer overflow vulnerability exists in the uncompressed_fp_dng_load…

openSUSE-SU-2026:10565-1 — libraw-devel-0.22.1-1.1 on GA media

libraw-devel-0.22.1-1.1 on GA media

RHSA-2026:13870 — Red Hat Security Advisory: LibRaw security update

LibRaw: LibRaw: Arbitrary code execution via heap-based buffer overflow in lossless JPEG loading LibRaw: LibRaw: Arbitrary code execution via a specially crafted malicious file

SUSE-SU-2026:21360-1 — Security update for libraw

Security update for libraw

UBUNTU-CVE-2026-24450

Affected: Ubuntu:16.04:LTS: darktable, Ubuntu:16.04:LTS: dcraw, Ubuntu:Pro:16.04:LTS: digikam, Ubuntu:16.04:LTS: exactimage, Ubuntu:16.04:LTS: kodi, Ubuntu:16.04:LTS: rawtherapee, Ubuntu:16.04:LTS: ufraw, Ubuntu:18.04:LTS: darktable, Ubuntu:18.04:LTS: dcraw, Ubuntu:Pro:18.04:LTS: digikam and 37 more

WID-SEC-W-2026-1298 — Red Hat Enterprise Linux (LibRaw): Mehrere Schwachstellen ermöglichen Codeausführung oder DoS

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial-of-Service-Zustand zu verursachen.