LibRaw vulnerabilities
15 published CVEs name LibRaw among the affected products.
- Published CVEs
- 15
- Last 12 months
- 7
- Critical
- 6
- Known exploited
- 0
Critical 6High 4Medium 1Low 4Not scored 0
CVEs per yearBy the year they were published
- 20174
- 20254
- 20267
Newest CVEs
- CVE-2026-111272
LibRaw through 0.22.2 Heap Out-of-Bounds Read via parseNikonMakernote ShotInfo
LibRaw · LibRaw
Medium6.8 - CVE-2026-20911
A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted…
LibRaw · LibRaw
Critical9.8 - CVE-2026-21413
A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted…
LibRaw · LibRaw
Critical9.8 - CVE-2026-20889
A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead…
LibRaw · LibRaw
Critical9.8 - CVE-2026-24660
A heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead…
LibRaw · LibRaw
High8.1 - CVE-2026-24450
An integer overflow vulnerability exists in the uncompressed_fp_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can…
LibRaw · LibRaw
High8.1 - CVE-2026-20884
An integer overflow vulnerability exists in the deflate_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can lead to a…
LibRaw · LibRaw
High8.1 - CVE-2025-43964
In LibRaw before 0.21.4, tag 0x412 processing in phase_one_correct in decoders/load_mfbacks.cpp does not enforce minimum w0 and w1 values.
LibRaw · LibRaw
Low2.9 - CVE-2025-43963
In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp allows out-of-buffer access because split_col and split_row values are not checked in…
LibRaw · LibRaw
Low2.9 - CVE-2025-43962
In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp has out-of-bounds reads for tag 0x412 processing, related to large w0 or w1 values or…
LibRaw · LibRaw
Low2.9