Every CVE Search/ Get API key

CVE-2013-2126

Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw...

7.5 HighFix available

CVE-2013-2126 is a high vulnerability (CVSS 7.5) in Libraw, published May 31, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.50%, the 91st percentile. Fixed in darktable 1.2.1-2.

Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed full-color (1) Foveon or (2) sRAW image file.

Exploit likelihood

4.50%Up 0.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed full-color (1) Foveon or (2) sRAW image file.

Record
CVE-2013-2126
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-399
Updated
2026-11-02
CVE List No score

Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed full-color (1) Foveon or (2) sRAW image file.

Record
CVE-2013-2126
Updated
2026-11-02
EUVDEUVD-2013-2094 No score

Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed full-color (1) Foveon or (2) sRAW image file.

Record
EUVD-2013-2094
Updated
2026-11-03
GitHub AdvisoriesGHSA-f8qw-gp3p-w497 No score

Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw...

Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed full-color (1) Foveon or (2) sRAW image file.

Record
GHSA-f8qw-gp3p-w497
Updated
2026-11-02
OSV No score

Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed full-color (1) Foveon or (2) sRAW image file.

Record
CVE-2013-2126
Updated
2026-11-02
OSVDEBIAN-CVE-2013-2126 No score

Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed full-color (1) Foveon or (2) sRAW image file.

Record
DEBIAN-CVE-2013-2126
Updated
2026-11-02
Show 6 moreShow less
OSVMGASA-2013-0167 No score

Updated libraw packages fix security vulnerability

A double-free error exits when handling damaged full-color within Foveon and sRAW files in libraw before 0.15.2 (CVE-2013-2126).

Record
MGASA-2013-0167
Updated
2026-11-02
OSVMGASA-2013-0219 No score

Updated libkdcraw package fixes security issue.

This update fixes a security issue due to a possible double-free() on error recovery on damaged full-color (Foveon, sRAW) files. (CVE-2013-2126)

Record
MGASA-2013-0219
Updated
2026-11-02
OSVMGASA-2013-0223 No score

Updated darktable package fixes security vulnerability

A double-free error exits when handling damaged full-color within Foveon and sRAW files in libraw, which is embedded in darktable (CVE-2013-2126).

Record
MGASA-2013-0223
Updated
2026-11-02
OSVMGASA-2013-0269 No score

Updated kde packages fix security issues

This update provides the last stable version of KDE for the 4.10.x branch. Some of the new packages fixes additional issues open on our tracker :

  • A memory leak in kde-workspace (kde #314919 & mga #7953)
  • A memory leak in kmix ( mga #10702 & kde #309464 )
  • A packaging issue affecting kdebase4-runtime (mga #10387) & another affecting kdegraphics-thumbnailers (mga #10388)
  • A crash of akonadi davgroupware ressource ( mga #10396)
  • Several security issues affecting libraw & so libkdcraw ( CVE-2013-2126, CVE-2013-2127,
  • Several security fixes affecting kdebase4-workspace ( CVE-2013-4132 & CVE-2013-4133 ) See the referenced buglist for the complete list of fixes.
Record
MGASA-2013-0269
Updated
2026-11-02
OSVopenSUSE-SU-2024:10156-1 No score

libraw-devel-0.17.2-1.4 on GA media

These are all security issues fixed in the libraw-devel-0.17.2-1.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10156-1
Updated
2026-11-02
OSVUBUNTU-CVE-2013-2126 No score

Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed full-color (1) Foveon or (2) sRAW image file.

Record
UBUNTU-CVE-2013-2126
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
darktable
Debian:12
before 1.2.1-2
1.2.1-2
darktable
Debian:13
before 1.2.1-2
1.2.1-2
darktable
Debian:14
before 1.2.1-2
1.2.1-2
libkdcraw
Debian:13
before 24.12.0-1
24.12.0-1
libkdcraw
Debian:14
before 24.12.0-1
24.12.0-1
libraw
Debian:12
before 0.15.3-1
0.15.3-1
libraw
Debian:13
before 0.15.3-1
0.15.3-1
libraw
Debian:14
before 0.15.3-1
0.15.3-1
libraw
Mageia:2
before 0.14.5-1.1.mga2
0.14.5-1.1.mga2
libraw
Mageia:3
before 0.14.7-5.1.mga3
0.14.7-5.1.mga3
Show 146 moreShow less
Affected packages
PackageAffectedFixed
libkdcraw
Mageia:2
before 4.8.5-1.2.mga2
4.8.5-1.2.mga2
darktable
Mageia:3
before 1.2-1.1.mga3
1.2-1.1.mga3
analitza
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
ark
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
blinken
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
bomber
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
bovo
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
cantor
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
dragon
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
ffmpegthumbs
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
filelight
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
granatier
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
gwenview
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
jovie
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
juk
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kaccessible
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kajongg
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kalgebra
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kalzium
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kamera
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kanagram
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kapman
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kate
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
katomic
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kblackbox
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kblocks
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kbounce
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kbreakout
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kbruch
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kcalc
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kcharselect
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kcolorchooser
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kde4-audiocd
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kdeadmin4
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kdeartwork4
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kdebase4
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kdebase4-runtime
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kdebase4-workspace
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kde-base-artwork
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kdegraphics-mobipocket
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kdegraphics-strigi-analyzer
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kdegraphics-thumbnailers
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kde-l10n
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kdelibs4
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kdenetwork4
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kdepim4
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kdepim4-runtime
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kdepimlibs4
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kdeplasma-addons
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kdesdk4
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kdetoys4
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kde-wallpapers
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kdewebdev4
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kdf
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kdiamond
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kfloppy
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kfourinline
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kgamma
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kgeography
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kgoldrunner
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kgpg
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
khangman
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kig
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kigo
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
killbots
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kimono
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kiriki
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kiten
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kjumpingcube
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
klettres
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
klickety
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
klines
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kmag
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kmahjongg
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kmines
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kmix
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kmousetool
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kmouth
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kmplot
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
knavalbattle
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
knetwalk
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kolf
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kollision
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kolourpaint
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
konquest
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
konsole
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
korundum
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kpat
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kremotecontrol
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kreversi
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kross-interpreters
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kruler
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
ksaneplugin
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kscd
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kshisen
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
ksirk
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
ksnakeduel
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
ksnapshot
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kspaceduel
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
ksquares
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kstars
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
ksudoku
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
ktimer
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
ktouch
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
ktuberling
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kturtle
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kubrick
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kwallet
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
kwordquiz
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
libkactivities
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
libkcddb
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
libkcompactdisc
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
libkdcraw
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
libkdeedu
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
libkdegames
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
libkexiv2
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
libkipi
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
libkmahjongg
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
libksane
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
lskat
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
marble
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
mplayerthumbs
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
nepomuk-core
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
nepomuk-widgets
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
okular
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
oxygen-icon-theme
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
pairs
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
palapeli
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
parley
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
perl-kde4
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
perl-qt4
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
picmi
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
print-manager
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
python-kde4
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
qyoto
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
rocs
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
ruby-qt4
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
smokegen
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
smokekde
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
smokeqt
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
step
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
superkaramba
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
svgpart
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
sweeper
Mageia:3
before 4.10.5-1.1.mga3
4.10.5-1.1.mga3
task-kde4
Mageia:3
before 4.10.5-1.mga3
4.10.5-1.mga3
libraw
openSUSE:Tumbleweed
before 0.17.2-1.4
0.17.2-1.4

History

History
WhenChangedSources
2026-11-03affected
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 26 moreShow less
MoveEnter Open