LI
Product
LibRaw
64
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 14High 21Medium 26Low 0
Watch
Add LibRaw to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-16910 | 6.5 | Dec 7 | An error within the "LibRaw::xtrans_interpolate()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read memory access… Affected: before 0.18.6 |
| CVE-2026-111272 | 5.5 | Oct 15 | LibRaw through 0.22.2 Heap Out-of-Bounds Read via parseNikonMakernote ShotInfo Affected: through 0.22.2 |
| CVE-2020-35535 | 5.5 | Sep 1 | In LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF()" function (libraw\src\metadata\sony.cpp) when processing srf files Affected: 0.20.0; 0.20.0; 0.20.1; 0.20.2; 0.21.0 |
| CVE-2020-35534 | 5.5 | Sep 1 | In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function (libraw\src\decoders\crx.cpp) when processing cr3 files Affected: 0.20.0; 0.20.0; 0.20.1; 0.20.2; 0.21.0 |
| CVE-2020-35533 | 5.5 | Sep 1 | In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobe_copy_pixel()" function (libraw\src\decoders\dng.cpp) when reading data from the image file Affected: 0.20.0; 0.20.0; 0.20.1; 0.20.2; 0.21.0 |
| CVE-2020-35532 | 5.5 | Sep 1 | In LibRaw, an out-of-bounds read vulnerability exists within the "simple_decode_row()" function (libraw\src\x3f\x3f_utils_patched.cpp) which can be triggered via an image with a… Affected: 0.20.0; 0.20.0; 0.20.1; 0.20.2; 0.21.0 |
| CVE-2020-35531 | 5.5 | Sep 1 | In LibRaw, an out-of-bounds read vulnerability exists within the get_huffman_diff() function (libraw\src\x3f\x3f_utils_patched.cpp) when reading data from an image file Affected: 0.20.0; 0.20.0; 0.20.1; 0.20.2; 0.21.0 |
| CVE-2020-35530 | 5.5 | Sep 1 | In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patched.cpp) that can be triggered via a crafted X3F file Affected: 0.20.0; 0.20.0; 0.20.1; 0.20.2; 0.21.0 |
| CVE-2020-24890 | 5.5 | Sep 16 | libraw 20.0 has a null pointer dereference vulnerability in parse_tiff_ifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code execution Affected: 0.20.0 |
| CVE-2026-5342 | 5.3 | Apr 2 | LibRaw TIFF/NEF decoders_libraw.cpp nikon_load_padded_packed_raw out-of-bounds Affected: 0.1; 0.2; 0.3; 0.4; 0.5; 0.6; +16 more |
| CVE-2026-5318 | 4.3 | Apr 2 | LibRaw JPEG DHT losslessjpeg.cpp initval out-of-bounds write Affected: 0.1; 0.2; 0.3; 0.4; 0.5; 0.6; +16 more |
| CVE-2013-1439 | – | Sep 16 | The "faster LJPEG decoder" in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a… Affected: 0.13.0; 0.13.1; 0.13.2; 0.13.3; 0.13.4; 0.13.5; +15 more |
| CVE-2013-2127 | – | Aug 14 | Buffer overflow in the exposure correction code in LibRaw before 0.15.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code… Affected: through 0.15.0 |
| CVE-2013-2126 | – | Aug 14 | Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service… Affected: through 0.15.1; 0.15.0 |