Libraw vulnerabilities

Products

• Libraw 64
• Libraw-demosaic-pack-gpl2 2

Newest

• libraw LibRaw through 0.22.2 Heap Out-of-Bounds Read via parseNikonMakernote ShotInfo CVE-2026-111272 6.8 MediumOctober 15, 2026
• libraw, red hat enterprise linux 6, enterprise linux 7 +2 more +4 more A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of... CVE-2026-20911 Fix available 9.8 CriticalApril 7, 2026
• libraw, red hat enterprise linux 6, enterprise linux 7 +13 more +15 more A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of... CVE-2026-21413 Fix available 9.8 CriticalApril 7, 2026
• libraw, red hat enterprise linux 6, enterprise linux 7 +9 more +11 more A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw... CVE-2026-20889 Fix available 9.8 CriticalApril 7, 2026
• libraw, red hat enterprise linux 6, enterprise linux 7 +9 more +11 more A heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw... CVE-2026-24660 Fix available 8.1 HighApril 7, 2026
• libraw An integer overflow vulnerability exists in the uncompressed_fp_dng_load_raw functionality of... CVE-2026-24450 Fix available 8.1 HighApril 7, 2026
• libraw An integer overflow vulnerability exists in the deflate_dng_load_raw functionality of LibRaw... CVE-2026-20884 Fix available 8.1 HighApril 7, 2026
• libraw LibRaw TIFF/NEF decoders_libraw.cpp nikon_load_padded_packed_raw out-of-bounds CVE-2026-5342 Fix available 6.9 MediumApril 2, 2026
• libraw LibRaw JPEG DHT losslessjpeg.cpp initval out-of-bounds write CVE-2026-5318 Fix available 5.3 MediumApril 2, 2026
• libraw In LibRaw before 0.21.4, tag 0x412 processing in phase_one_correct in decoders/load_mfbacks.cpp... CVE-2025-43964 Fix available 2.9 LowApril 20, 2025
• libraw In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp allows out-of-buffer... CVE-2025-43963 Fix available 2.9 LowApril 20, 2025
• libraw In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp has out-of-bounds reads... CVE-2025-43962 Fix available 2.9 LowApril 20, 2025
• libraw In LibRaw before 0.21.4, metadata/tiff.cpp has an out-of-bounds read in the Fujifilm 0xf00c tag... CVE-2025-43961 Fix available 2.9 LowApril 20, 2025
• libraw Buffer Overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing... CVE-2020-22628 Fix available 6.5 MediumAugust 22, 2023
• libraw, fedoraproject fedora, redhat enterprise linux +2 more A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously... CVE-2023-1729 Fix available 6.5 MediumMay 15, 2023
• libraw Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges... CVE-2021-32142 Fix available 7.8 HighFebruary 17, 2023
• libraw, debian linux +1 more In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobe_copy_pixel()"... CVE-2020-35533 Fix available 5.5 MediumSeptember 1, 2022
• libraw In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function ... CVE-2020-35534 Fix available 5.5 MediumSeptember 1, 2022
• libraw In LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF()"... CVE-2020-35535 Fix available 5.5 MediumSeptember 1, 2022
• libraw, debian linux +1 more In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw... CVE-2020-35530 Fix available 5.5 MediumSeptember 1, 2022
• libraw, debian linux +1 more In LibRaw, an out-of-bounds read vulnerability exists within the get_huffman_diff() function ... CVE-2020-35531 Fix available 5.5 MediumSeptember 1, 2022
• libraw, debian linux +1 more In LibRaw, an out-of-bounds read vulnerability exists within the "simple_decode_row()" function ... CVE-2020-35532 Fix available 5.5 MediumSeptember 1, 2022
• libraw Libraw before 0.20.1 has a stack buffer overflow via LibRaw::identify_process_dng_fields in... CVE-2020-24870 Fix available 8.8 HighJune 2, 2021
• libraw A buffer overflow vulnerability in LibRaw version < 20.0 LibRaw::GetNormalizedModel in src... CVE-2020-24889 Fix available 7.8 HighSeptember 16, 2020
• libraw libraw 20.0 has a null pointer dereference vulnerability in parse_tiff_ifd in src/metadata/tiff... CVE-2020-24890 Fix availableDisputed 5.5 MediumSeptember 16, 2020
• libraw, debian linux, fedoraproject fedora +2 more LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp... CVE-2020-15503 Fix available 7.5 HighJuly 2, 2020
• libraw LibRaw before 0.20-Beta3 has an out-of-bounds write in parse_exif() in metadata\exif_gps.cpp via... CVE-2020-15365 6.5 MediumJune 28, 2020
• flexera software llc libraw, debian linux +1 more An error within the "parse_sinar_ia()" function (internal/dcraw_common.cpp) within LibRaw... CVE-2018-5819 Fix available 7.5 HighJanuary 18, 2019
• libraw, debian linux +1 more An error within the "parse_rollei()" function (internal/dcraw_common.cpp) within LibRaw versions... CVE-2018-5818 Fix available 7.5 HighJanuary 18, 2019
• flexera software llc libraw, debian linux +1 more A type confusion error within the "unpacked_load_raw()" function within LibRaw versions prior to... CVE-2018-5817 Fix available 7.5 HighJanuary 18, 2019
• libraw LibRaw::raw2image() in libraw_cxx.cpp has a heap-based buffer overflow. CVE-2018-20365 Fix available 6.5 MediumDecember 22, 2018
• libraw LibRaw::copy_bayer in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference. CVE-2018-20364 Fix available 6.5 MediumDecember 22, 2018
• libraw LibRaw::raw2image in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference. CVE-2018-20363 Fix available 6.5 MediumDecember 22, 2018
• libraw There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in... CVE-2018-20337 Fix available 8.8 HighDecember 21, 2018
• libraw An error within the "LibRaw::parse_exif()" function (internal/dcraw_common.cpp) in LibRaw... CVE-2018-5809 Fix available 8.8 HighDecember 7, 2018
• libraw, debian linux +1 more An error within the "find_green()" function (internal/dcraw_common.cpp) in LibRaw versions prior... CVE-2018-5808 Fix available 8.8 HighDecember 7, 2018
• libraw, redhat enterprise linux desktop, enterprise linux server +1 more +3 more An error within the "leaf_hdr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions... CVE-2018-5806 Fix available 6.5 MediumDecember 7, 2018
• libraw, redhat enterprise linux desktop, enterprise linux server +1 more +3 more A boundary error within the "quicktake_100_load_raw()" function (internal/dcraw_common.cpp) in... CVE-2018-5805 Fix available 8.8 HighDecember 7, 2018
• libraw A type confusion error within the "identify()" function (internal/dcraw_common.cpp) in LibRaw... CVE-2018-5804 Fix available 6.5 MediumDecember 7, 2018
• libraw, canonical ubuntu linux +1 more An error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw... CVE-2018-5812 Fix available 6.5 MediumAugust 2, 2018
• libraw, canonical ubuntu linux +1 more An error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw... CVE-2018-5811 Fix available 6.5 MediumAugust 2, 2018
• libraw, canonical ubuntu linux +1 more An error within the "rollei_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions... CVE-2018-5810 Fix available 8.8 HighAugust 2, 2018
• libraw, canonical ubuntu linux +1 more An error within the "samsung_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions... CVE-2018-5807 Fix available 8.8 HighAugust 2, 2018
• libraw, canonical ubuntu linux +1 more An integer overflow error within the "identify()" function (internal/dcraw_common.cpp) in LibRaw... CVE-2018-5816 Fix available 6.5 MediumJuly 31, 2018
• libraw, canonical ubuntu linux +1 more An integer overflow error within the "parse_qt()" function (internal/dcraw_common.cpp) in LibRaw... CVE-2018-5815 Fix available 6.5 MediumJuly 31, 2018
• libraw, canonical ubuntu linux +1 more An error within the "parse_minolta()" function (dcraw/dcraw.c) in LibRaw versions prior to 0.18... CVE-2018-5813 Fix available 6.5 MediumJuly 31, 2018
• libraw, canonical ubuntu linux +1 more An issue was discovered in LibRaw 0.18.9. There is an out-of-bounds read affecting the X3F... CVE-2018-10529 Fix available 8.8 HighApril 28, 2018
• libraw, canonical ubuntu linux +1 more An issue was discovered in LibRaw 0.18.9. There is a stack-based buffer overflow in the utf2char... CVE-2018-10528 Fix available 8.8 HighApril 28, 2018
• libraw, canonical ubuntu linux, debian linux +3 more +5 more An error within the "kodak_radc_load_raw()" function (internal/dcraw_common.cpp) related to the ... CVE-2018-5802 Fix available 8.8 HighMarch 12, 2018
• libraw, canonical ubuntu linux, debian linux +3 more +5 more An error within the "LibRaw::unpack()" function (src/libraw_cxx.cpp) in LibRaw versions prior to... CVE-2018-5801 Fix available 6.5 MediumMarch 12, 2018
• Show olderLoading…