Every CVE Search/ Get API key

CVE-2021-32142

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges...

7.8 HighFix available

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.39%Down 0.6 points since Feb 18, 2023
90%50%10%1%

What each source reports

NVD Score used 7.8

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.

Record
CVE-2021-32142
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
CVE List 7.8

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.

Record
CVE-2021-32142
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
EUVDEUVD-2021-19000 7.8

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.

Record
EUVD-2021-19000
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-2vqp-59qv-pmrc 9.8

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges...

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.

Record
GHSA-2vqp-59qv-pmrc
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
OSVAZL-43756 7.8

CVE-2021-32142 affecting package LibRaw 0.19.5-5

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.

Record
AZL-43756
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-45267 7.8

CVE-2021-32142 affecting package LibRaw for versions less than 0.21.3-1

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.

Record
AZL-45267
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 22 moreShow less
OSV 7.8

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.

Record
CVE-2021-32142
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2021-32142 7.8

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.

Record
DEBIAN-CVE-2021-32142
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1339 7.8

LibRaw security update

LibRaw is a library for reading RAW files from digital photo cameras (CRW/CR2, NEF, RAF, etc, virtually all RAW formats are supported).It pays special attention to correct retrieval of data required for subsequent RAW conversion.The library is intended for embedding in RAW converters, data analyzers, and other programs using RAW files as the initial data.

Security Fix(es):

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.(CVE-2021-32142)

Record
OESA-2024-1339
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1446 7.8

LibRaw security update

LibRaw is a library for reading RAW files from digital photo cameras (CRW/CR2, NEF, RAF, etc, virtually all RAW formats are supported).It pays special attention to correct retrieval of data required for subsequent RAW conversion.The library is intended for embedding in RAW converters, data analyzers, and other programs using RAW files as the initial data.

Security Fix(es):

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.(CVE-2021-32142)

Record
OESA-2024-1446
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1447 7.8

LibRaw security update

LibRaw is a library for reading RAW files from digital photo cameras (CRW/CR2, NEF, RAF, etc, virtually all RAW formats are supported).It pays special attention to correct retrieval of data required for subsequent RAW conversion.The library is intended for embedding in RAW converters, data analyzers, and other programs using RAW files as the initial data.

Security Fix(es):

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.(CVE-2021-32142)

Record
OESA-2024-1447
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1448 7.8

LibRaw security update

LibRaw is a library for reading RAW files from digital photo cameras (CRW/CR2, NEF, RAF, etc, virtually all RAW formats are supported).It pays special attention to correct retrieval of data required for subsequent RAW conversion.The library is intended for embedding in RAW converters, data analyzers, and other programs using RAW files as the initial data.

Security Fix(es):

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.(CVE-2021-32142)

Record
OESA-2024-1448
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1449 7.8

LibRaw security update

LibRaw is a library for reading RAW files from digital photo cameras (CRW/CR2, NEF, RAF, etc, virtually all RAW formats are supported).It pays special attention to correct retrieval of data required for subsequent RAW conversion.The library is intended for embedding in RAW converters, data analyzers, and other programs using RAW files as the initial data.

Security Fix(es):

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.(CVE-2021-32142)

Record
OESA-2024-1449
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1450 7.8

LibRaw security update

LibRaw is a library for reading RAW files from digital photo cameras (CRW/CR2, NEF, RAF, etc, virtually all RAW formats are supported).It pays special attention to correct retrieval of data required for subsequent RAW conversion.The library is intended for embedding in RAW converters, data analyzers, and other programs using RAW files as the initial data.

Security Fix(es):

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.(CVE-2021-32142)

Record
OESA-2024-1450
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:6343 5.3

Red Hat Security Advisory: LibRaw security update

Record
RHSA-2023:6343
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2024:0343 5.3

Red Hat Security Advisory: LibRaw security update

Record
RHSA-2024:0343
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2024:2994 5.3

Red Hat Security Advisory: LibRaw security update

Record
RHSA-2024:2994
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2021-32142 7.8

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.

Record
UBUNTU-CVE-2021-32142
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2023:6343 No score

Moderate: LibRaw security update

LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).

Security Fix(es):

  • LibRaw: stack buffer overflow in LibRaw_buffer_datastream::gets() in src/libraw_datastream.cpp (CVE-2021-32142)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2023:6343
Updated
2026-11-02
OSVALSA-2024:2994 No score

Moderate: LibRaw security update

LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).

Security Fix(es):

  • LibRaw: stack buffer overflow in LibRaw_buffer_datastream::gets() in src/libraw_datastream.cpp (CVE-2021-32142)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2024:2994
Updated
2026-11-02
OSVCLSA-2025-1745427138 No score

LibRaw: Fix of CVE-2021-32142

  • CVE-2021-32142: fix buffer overflow vulnerability in LibRaw_buffer_datastream::gets(char*, int) in libraw_datastream.cpp
Record
CLSA-2025-1745427138
Updated
2026-11-02
OSVMGASA-2023-0082 No score

Updated libraw packages fix security vulnerability

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp. (CVE-2021-32142)

Record
MGASA-2023-0082
Updated
2026-11-02
OSVRLSA-2024:2994 No score

Moderate: LibRaw security update

LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).

Security Fix(es):

  • LibRaw: stack buffer overflow in LibRaw_buffer_datastream::gets() in src/libraw_datastream.cpp (CVE-2021-32142)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.

Record
RLSA-2024:2994
Updated
2026-11-02
OSVSUSE-SU-2023:0510-1 No score

Security update for libraw

This update for libraw fixes the following issues:

  • CVE-2021-32142: Fixed buffer overflow in the LibRaw_buffer_datastream:gets function (bsc#1208470).
Record
SUSE-SU-2023:0510-1
Updated
2026-11-02
OSVSUSE-SU-2023:0511-1 No score

Security update for libraw

This update for libraw fixes the following issues:

  • CVE-2021-32142: Fixed buffer overflow in the LibRaw_buffer_datastream:gets function (bsc#1208470).
Record
SUSE-SU-2023:0511-1
Updated
2026-11-02
OSVSUSE-SU-2023:0512-1 No score

Security update for libraw

This update for libraw fixes the following issues:

  • CVE-2021-32142: Fixed buffer overflow in the LibRaw_buffer_datastream:gets function (bsc#1208470).
Record
SUSE-SU-2023:0512-1
Updated
2026-11-02
OSVUSN-6137-1 No score

libraw vulnerabilities

It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, a remote attacker could cause applications linked against LibRaw to crash, resulting in a denial of service, or possibly execute arbitrary code.

Record
USN-6137-1
Updated
2026-11-02
OSVUSN-7266-1 No score

digikam vulnerabilities

Zinuo Han and Ao Wang discovered that the Android DNG SDK, vendored in digiKam, did not correctly parse certain files. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2017-0691)

It was discovered that Platinum Upnp SDK, vendored in digiKam, was vulnerable to a path traversal attack. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-19858)

It was discovered that LibRaw, vendored in digiKam, did not correctly handle certain memory operations. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-22628)

It was discovered that LibRaw, vendored in digiKam, did not correctly handle certain memory operations. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-35530, CVE-2020-35531, CVE-2020-35532, CVE-2020-35533)

It was discovered that LibRaw, vendored in digiKam, did not correctly handle certain memory operations. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-32142)

It was discovered that LibRaw, vendored in digiKam, did not correctly handle certain memory operations. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-1729)

Record
USN-7266-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
LibRaw
AlmaLinux:9
 before 0.20.2-6.el9
0.20.2-6.el9
LibRaw-devel
AlmaLinux:9
 before 0.20.2-6.el9
0.20.2-6.el9
LibRaw
AlmaLinux:8
 before 0.19.5-4.el8
0.19.5-4.el8
LibRaw-devel
AlmaLinux:8
 before 0.19.5-4.el8
0.19.5-4.el8
LibRaw
Azure Linux:2
 through 0.19.5-5 None known
LibRaw
Azure Linux:3
 before 0.21.3-1
0.21.3-1
LibRaw
TuxCare:AlmaLinux:9.2
 before 0.20.2-5.el9_2.tuxcare.els1
0.20.2-5.el9_2.tuxcare.els1
LibRaw-devel
TuxCare:AlmaLinux:9.2
 before 0.20.2-5.el9_2.tuxcare.els1
0.20.2-5.el9_2.tuxcare.els1
LibRaw-samples
TuxCare:AlmaLinux:9.2
 before 0.20.2-5.el9_2.tuxcare.els1
0.20.2-5.el9_2.tuxcare.els1
LibRaw-static
TuxCare:AlmaLinux:9.2
 before 0.20.2-5.el9_2.tuxcare.els1
0.20.2-5.el9_2.tuxcare.els1
Show 101 moreShow less
Affected packages
PackageAffectedFixed
libraw
Debian:12
 before 0.20.2-2.1
0.20.2-2.1
libraw
Debian:13
 before 0.20.2-2.1
0.20.2-2.1
libraw
Debian:14
 before 0.20.2-2.1
0.20.2-2.1
libraw
Debian:10
From an advisory covering 2 CVEs
 before 0.19.2-2+deb10u3, plus listed versions
0.19.2-20.19.2-2+deb10u10.19.2-2+deb10u2
0.19.2-2+deb10u3
libraw
Debian:11
From an advisory covering 2 CVEs
 before 0.20.2-1+deb11u1, plus listed versions
0.20.2-1
0.20.2-1+deb11u1
libraw
Mageia:8
 before 0.20.2-1.1.mga8
0.20.2-1.1.mga8
LibRaw
openEuler:22.03-LTS-SP3
 before 0.20.2-7.oe2203sp3
0.20.2-7.oe2203sp3
LibRaw
openEuler:22.03-LTS-SP1
 before 0.20.2-7.oe2203sp1
0.20.2-7.oe2203sp1
LibRaw
openEuler:22.03-LTS-SP2
 before 0.20.2-7.oe2203sp2
0.20.2-7.oe2203sp2
LibRaw
openEuler:20.03-LTS-SP1
 before 0.20.2-6.oe1
0.20.2-6.oe1
LibRaw
openEuler:20.03-LTS-SP4
 before 0.20.2-6.oe2003sp4
0.20.2-6.oe2003sp4
LibRaw
openEuler:22.03-LTS
 before 0.20.2-7.oe2203
0.20.2-7.oe2203
LibRaw
Red Hat:enterprise_linux:9::appstream
 before 0:0.20.2-6.el9
0:0.20.2-6.el9
LibRaw-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:0.20.2-6.el9
0:0.20.2-6.el9
LibRaw-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:0.20.2-6.el9
0:0.20.2-6.el9
LibRaw-samples-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:0.20.2-6.el9
0:0.20.2-6.el9
LibRaw-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:0.20.2-6.el9
0:0.20.2-6.el9
LibRaw-debugsource
Red Hat:enterprise_linux:9::crb
 before 0:0.20.2-6.el9
0:0.20.2-6.el9
LibRaw-devel
Red Hat:enterprise_linux:9::crb
 before 0:0.20.2-6.el9
0:0.20.2-6.el9
LibRaw-samples-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:0.20.2-6.el9
0:0.20.2-6.el9
LibRaw
Red Hat:enterprise_linux:7::client
 before 0:0.19.4-2.el7_9
0:0.19.4-2.el7_9
LibRaw-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:0.19.4-2.el7_9
0:0.19.4-2.el7_9
LibRaw-devel
Red Hat:enterprise_linux:7::client
 before 0:0.19.4-2.el7_9
0:0.19.4-2.el7_9
LibRaw-static
Red Hat:enterprise_linux:7::client
 before 0:0.19.4-2.el7_9
0:0.19.4-2.el7_9
LibRaw
Red Hat:enterprise_linux:7::server
 before 0:0.19.4-2.el7_9
0:0.19.4-2.el7_9
LibRaw-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:0.19.4-2.el7_9
0:0.19.4-2.el7_9
LibRaw-devel
Red Hat:enterprise_linux:7::server
 before 0:0.19.4-2.el7_9
0:0.19.4-2.el7_9
LibRaw-static
Red Hat:enterprise_linux:7::server
 before 0:0.19.4-2.el7_9
0:0.19.4-2.el7_9
LibRaw
Red Hat:enterprise_linux:7::workstation
 before 0:0.19.4-2.el7_9
0:0.19.4-2.el7_9
LibRaw-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:0.19.4-2.el7_9
0:0.19.4-2.el7_9
LibRaw-devel
Red Hat:enterprise_linux:7::workstation
 before 0:0.19.4-2.el7_9
0:0.19.4-2.el7_9
LibRaw-static
Red Hat:enterprise_linux:7::workstation
 before 0:0.19.4-2.el7_9
0:0.19.4-2.el7_9
LibRaw
Red Hat:enterprise_linux:8::appstream
 before 0:0.19.5-4.el8
0:0.19.5-4.el8
LibRaw-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:0.19.5-4.el8
0:0.19.5-4.el8
LibRaw-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:0.19.5-4.el8
0:0.19.5-4.el8
LibRaw-samples-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:0.19.5-4.el8
0:0.19.5-4.el8
LibRaw-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:0.19.5-4.el8
0:0.19.5-4.el8
LibRaw-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:0.19.5-4.el8
0:0.19.5-4.el8
LibRaw-devel
Red Hat:enterprise_linux:8::crb
 before 0:0.19.5-4.el8
0:0.19.5-4.el8
LibRaw-samples-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:0.19.5-4.el8
0:0.19.5-4.el8
LibRaw
Rocky Linux:8
 before 0:0.19.5-4.el8
0:0.19.5-4.el8
libraw
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 0.15.4-36.1
0.15.4-36.1
libraw
SUSE:Linux Enterprise Workstation Extension 12 SP5
 before 0.15.4-36.1
0.15.4-36.1
libraw
SUSE:Linux Enterprise Workstation Extension 15 SP4
 before 0.18.9-150000.3.17.1
0.18.9-150000.3.17.1
libraw
openSUSE:Leap 15.4
 before 0.18.9-150000.3.17.1
0.18.9-150000.3.17.1
libraw
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4
 before 0.20.2-150400.3.3.1
0.20.2-150400.3.3.1
libraw
SUSE:Linux Enterprise Workstation Extension 15 SP4
 before 0.20.2-150400.3.3.1
0.20.2-150400.3.3.1
libraw
openSUSE:Leap 15.4
 before 0.20.2-150400.3.3.1
0.20.2-150400.3.3.1
libraw
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
0.16.2-10.17.0-10.17.1-10.17.1-1ubuntu0.10.17.1-1ubuntu0.2
Show 4 moreShow less
0.17.1-1ubuntu0.30.17.1-1ubuntu0.40.17.1-1ubuntu0.50.17.1-1ubuntu0.5+esm1
 None known
darktable
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.6.8-11.6.9-12.0.0-12.0.1-12.0.3-1
 None known
dcraw
Ubuntu:16.04:LTS
 All versions, plus listed versions
9.21-0.2
 None known
exactimage
Ubuntu:16.04:LTS
 All versions, plus listed versions
0.9.1-6build10.9.1-6ubuntu10.9.1-8ubuntu10.9.1-90.9.1-9build1
Show 4 moreShow less
0.9.1-100.9.1-110.9.1-120.9.1-12ubuntu1
 None known
kodi
Ubuntu:16.04:LTS
 All versions, plus listed versions
15.1+dfsg1-315.2+dfsg1-1build115.2+dfsg1-315.2+dfsg1-3ubuntu115.2+dfsg1-3ubuntu1.1
 None known
rawtherapee
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.2-2build14.2-4
 None known
ufraw
Ubuntu:16.04:LTS
 All versions, plus listed versions
0.20-3build1
 None known
libraw
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
0.18.2-20.18.5-10.18.7-20.18.8-10.18.8-1ubuntu0.1
Show 4 moreShow less
0.18.8-1ubuntu0.20.18.8-1ubuntu0.30.18.8-1ubuntu0.40.18.8-1ubuntu0.4+esm1
 None known
darktable
Ubuntu:18.04:LTS
 All versions, plus listed versions
2.2.5-22.4.0-12.4.1-12.4.2-1
 None known
dcraw
Ubuntu:18.04:LTS
 All versions, plus listed versions
9.27-1ubuntu1
 None known
exactimage
Ubuntu:18.04:LTS
 All versions, plus listed versions
0.9.2-1build11.0.1-1
 None known
kodi
Ubuntu:18.04:LTS
 All versions, plus listed versions
2:17.3+dfsg1-32:17.3+dfsg1-3build12:17.3+dfsg1-52:17.3+dfsg1-5build12:17.3+dfsg1-5build22:17.6+dfsg1-12:17.6+dfsg1-1build12:17.6+dfsg1-1ubuntu1
 None known
rawtherapee
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.2-15.3-1
 None known
ufraw
Ubuntu:18.04:LTS
 All versions, plus listed versions
0.22-1.10.22-20.22-30.22-3.1~build0.18.04.10.22-3.1ubuntu0.1
 None known
libraw
Ubuntu:20.04:LTS
 before 0.19.5-1ubuntu1.2, plus listed versions
0.19.5-10.19.5-1ubuntu10.19.5-1ubuntu1.1
0.19.5-1ubuntu1.2
darktable
Ubuntu:20.04:LTS
 All versions, plus listed versions
2.6.0-12.6.2-32.6.3-12.6.3-1build12.6.3-1build23.0.1-0ubuntu1
 None known
dcraw
Ubuntu:20.04:LTS
 All versions, plus listed versions
9.28-2
 None known
digikam
Ubuntu:Pro:20.04:LTS
 before 4:6.4.0+dfsg-3ubuntu0.1~esm1, plus listed versions
4:5.9.0-1ubuntu44:6.4.0+dfsg-34:6.4.0+dfsg-3build1
4:6.4.0+dfsg-3ubuntu0.1~esm1
exactimage
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.0.2-31.0.2-5ubuntu11.0.2-5ubuntu21.0.2-7ubuntu11.0.2-7ubuntu2
 None known
kodi
Ubuntu:20.04:LTS
 All versions, plus listed versions
2:17.6+dfsg1-4ubuntu42:17.6+dfsg1-4ubuntu92:17.6+dfsg1-4ubuntu102:18.5+dfsg1-0ubuntu32:18.6+dfsg1-2ubuntu1
 None known
rawtherapee
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6-15.7-15.8-1
 None known
darktable
Ubuntu:22.04:LTS
 All versions, plus listed versions
3.6.0-0ubuntu13.8.0-23.8.0-33.8.0-3build13.8.0-3build23.8.1-13.8.1-2
 None known
dcraw
Ubuntu:22.04:LTS
 All versions, plus listed versions
9.28-29.28-3
 None known
exactimage
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.0.2-81.0.2-8build11.0.2-8build21.0.2-8build3
 None known
kodi
Ubuntu:22.04:LTS
 All versions, plus listed versions
2:19.1+dfsg2-22:19.3+dfsg1-12:19.3+dfsg1-1build22:19.3+dfsg1-1build32:19.3+dfsg1-1build42:19.3+dfsg1-1build52:19.4+dfsg1-2
 None known
libraw
Ubuntu:22.04:LTS
 before 0.20.2-2ubuntu2.22.04.1, plus listed versions
0.20.2-1ubuntu30.20.2-2ubuntu10.20.2-2ubuntu2
0.20.2-2ubuntu2.22.04.1
rawtherapee
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.8-3
 None known
darktable
Ubuntu:24.04:LTS
 All versions, plus listed versions
4.4.2-1ubuntu14.4.2-1ubuntu24.4.2-1.14.4.2-1.1build14.6.1-24.6.1-2build34.6.1-2build44.6.1-2ubuntu1
 None known
dcraw
Ubuntu:24.04:LTS
 All versions, plus listed versions
9.28-39.28-3.1ubuntu19.28-5ubuntu1
 None known
exactimage
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.0.2-11build21.0.2-11build31.0.2-11build41.0.2-11build71.0.2-11build81.0.2-11build9
 None known
kodi
Ubuntu:24.04:LTS
 All versions, plus listed versions
2:20.2+dfsg-42:20.2+dfsg-4build12:20.2+dfsg-4build22:20.2+dfsg-4ubuntu12:20.3+dfsg-12:20.4+dfsg-12:20.5+dfsg-1build22:20.5+dfsg-1ubuntu1
 None known
rawtherapee
Ubuntu:24.04:LTS
 All versions, plus listed versions
5.9-1build15.9-25.10-15.10-1build35.10-1build4
 None known
darktable
Ubuntu:25.10
 All versions, plus listed versions
5.0.1-0ubuntu15.0.1-0ubuntu25.0.1-15.0.1-2
 None known
dcraw
Ubuntu:25.10
 All versions, plus listed versions
9.28-8
 None known
exactimage
Ubuntu:25.10
 All versions, plus listed versions
1.2.1-2
 None known
kodi
Ubuntu:25.10
 All versions, plus listed versions
2:21.2+dfsg-1build22:21.2+dfsg-42:21.2+dfsg-4build12:21.2+dfsg-4build2
 None known
rawtherapee
Ubuntu:25.10
 All versions, plus listed versions
5.11-2build2
 None known
darktable
Ubuntu:26.10
 All versions, plus listed versions
5.4.1-15.4.1-1build15.4.1-1build2
 None known
dcraw
Ubuntu:26.10
 All versions, plus listed versions
9.28-8build1
 None known
exactimage
Ubuntu:26.10
 All versions, plus listed versions
1.2.1-2build21.2.1-3build11.2.1-3build2
 None known
kodi
Ubuntu:26.10
 All versions, plus listed versions
2:21.3+dfsg-1ubuntu12:21.3+dfsg-1.2
 None known
rawtherapee
Ubuntu:26.10
 All versions, plus listed versions
5.12-25.12-2build1
 None known
darktable
Ubuntu:26.04:LTS
 All versions, plus listed versions
5.0.1-25.2.1-15.2.1-1build15.2.1-1build25.4.0-15.4.1-1
 None known
dcraw
Ubuntu:26.04:LTS
 All versions, plus listed versions
9.28-89.28-8build1
 None known
exactimage
Ubuntu:26.04:LTS
 All versions, plus listed versions
1.2.1-21.2.1-2build11.2.1-2build2
 None known
kodi
Ubuntu:26.04:LTS
 All versions, plus listed versions
2:21.2+dfsg-4build22:21.2+dfsg-4build32:21.2+dfsg-52:21.3+dfsg-12:21.3+dfsg-1build12:21.3+dfsg-1ubuntu1
 None known
rawtherapee
Ubuntu:26.04:LTS
 All versions, plus listed versions
5.11-2build25.12-15.12-2
 None known
libraw
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
 before 0.19.5-1ubuntu1.2, plus listed versions
0.19.5-10.19.5-1ubuntu10.19.5-1ubuntu1.1
0.19.5-1ubuntu1.2
libraw
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 0.20.2-2ubuntu2.22.04.1, plus listed versions
0.20.2-1ubuntu30.20.2-2ubuntu10.20.2-2ubuntu2
0.20.2-2ubuntu2.22.04.1
digikam
Ubuntu:Pro:16.04:LTS
From an advisory covering 9 CVEs
 before 4:4.12.0-0ubuntu7+esm1, plus listed versions
4:4.12.0-0ubuntu54:4.12.0-0ubuntu64:4.12.0-0ubuntu7
4:4.12.0-0ubuntu7+esm1
digikam
Ubuntu:Pro:18.04:LTS
From an advisory covering 9 CVEs
 before 4:5.6.0-0ubuntu10+esm1, plus listed versions
4:5.6.0-0ubuntu24:5.6.0-0ubuntu34:5.6.0-0ubuntu44:5.6.0-0ubuntu74:5.6.0-0ubuntu84:5.6.0-0ubuntu94:5.6.0-0ubuntu10
4:5.6.0-0ubuntu10+esm1
digikam
Ubuntu:Pro:20.04:LTS
From an advisory covering 9 CVEs
 before 4:6.4.0+dfsg-3ubuntu0.1~esm1, plus listed versions
4:5.9.0-1ubuntu44:6.4.0+dfsg-34:6.4.0+dfsg-3build1
4:6.4.0+dfsg-3ubuntu0.1~esm1
digikam
Ubuntu:Pro:22.04:LTS
From an advisory covering 9 CVEs
 before 4:7.5.0-3ubuntu0.1~esm1, plus listed versions
4:7.1.0-24:7.1.0-2ubuntu14:7.4.0-0ubuntu14:7.5.0-0ubuntu14:7.5.0-3fakesync1
4:7.5.0-3ubuntu0.1~esm1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-32142 is a high vulnerability (CVSS 7.8) in Libraw, published February 17, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. Fixed in LibRaw 0.20.2-6.el9.

References

Show 49 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open