Browse CVEs

CRITICAL 9.8 CVE-2026-24450 An integer overflow vulnerability exists in the uncompressed_fp_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious fi… Libraw Mitigation only Fix from $2,3002026-04-07 HIGH 8.1 CVE-2026-24660 A heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw Commit d20315b. A specially crafted malicious file … Libraw No fix yet Fix from $1,9502026-04-07 CRITICAL 9.8 CVE-2026-20884 An integer overflow vulnerability exists in the deflate_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can l… Libraw Mitigation only Fix from $2,3002026-04-07 CRITICAL 9.8 CVE-2026-20889 A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d20315b. A specially crafted malicious file … Libraw Mitigation only Fix from $2,3002026-04-07 CRITICAL 9.8 CVE-2026-20911 A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially cr… Libraw Mitigation only Fix from $2,3002026-04-07 CRITICAL 9.8 CVE-2026-21413 A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b. A speciall… Libraw Mitigation only Fix from $2,3002026-04-07 MEDIUM 5.5 CVE-2020-24890 libraw 20.0 has a null pointer dereference vulnerability in parse_tiff_ifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary … Libraw No fix yet Fix from $1,6002020-09-16 MEDIUM 6.5 CVE-2020-15365 LibRaw before 0.20-Beta3 has an out-of-bounds write in parse_exif() in metadata\exif_gps.cpp via an unrecognized AtomName and a zero value of tiff_ni… Libraw No fix yet Fix from $1,6002020-06-28 HIGH 7.5 CVE-2017-13735 There is a floating point exception in the kodak_radc_load_raw function in dcraw_common.cpp in LibRaw 0.18.2. It will lead to a remote denial of serv… Libraw Mitigation only Fix from $1,9502017-08-29