Most recent entries from all

ALSA-2026:51105 — Important: LibRaw security update

Affected: AlmaLinux:9: LibRaw, AlmaLinux:9: LibRaw-devel

LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).

Security Fix(es):

* LibRaw: LibRaw: Buffer Overflow vulnerability in image processing (CVE-2026-51235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

fkie_cve-2026-51235

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

GHSA-fr9w-862r-x425

LibRaw 0.21 is vulnerable to Buffer Overflow in the stretch() function (src/libraw_cxx.cpp) and fuji_rotate() function (src/decoders/fuji.cpp).

RHSA-2026:51105 — Red Hat Security Advisory: LibRaw security update

LibRaw: LibRaw: Buffer Overflow vulnerability in image processing

RHSA-2026:61353 — Red Hat Security Advisory: LibRaw security update

LibRaw: LibRaw: Buffer Overflow vulnerability in image processing

RLSA-2026:51105 — Important: LibRaw security update

Affected: Rocky Linux:9: LibRaw

LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).

Security Fix(es):

* LibRaw: LibRaw: Buffer Overflow vulnerability in image processing (CVE-2026-51235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Withdrawn: UBUNTU-CVE-2026-51235

Withdrawn by the publisher.

Affected: Ubuntu:Pro:16.04:LTS: libraw, Ubuntu:16.04:LTS: darktable, Ubuntu:16.04:LTS: dcraw, Ubuntu:Pro:16.04:LTS: digikam, Ubuntu:16.04:LTS: exactimage, Ubuntu:16.04:LTS: kodi, Ubuntu:16.04:LTS: rawtherapee, Ubuntu:16.04:LTS: ufraw, Ubuntu:Pro:18.04:LTS: libraw, Ubuntu:18.04:LTS: darktable and 34 more

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

WID-SEC-W-2026-3108 — Red Hat Enterprise Linux (LibRaw): Schwachstelle ermöglicht Codeausführung

Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen.