CVE-2026-24450
EUVD-2026-1962607.04.2026, 15:17
An integer overflow vulnerability exists in the uncompressed_fp_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| libraw | libraw | 0.22.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libraw |
| ||||||||||||||
| darktable |
| ||||||||||||||
| exactimage |
| ||||||||||||||
| dcraw |
| ||||||||||||||
| rawtherapee |
| ||||||||||||||
| kodi |
| ||||||||||||||
| digikam |
| ||||||||||||||
| ufraw |
|
Red Hat Enterprise Linux Releases