LibRaw 0.22.0
Approved changes feed: RSS · Atom
cpe:2.3:a:libraw:libraw:0.22.0:*:*:*:*:*:*:*
part: a version: 0.22.0 update: *
| Vendor | Libraw (3d0ebedf-f60e-57e5-a38a-8613009f45f5) |
|---|---|
| Product | Libraw (42eb3480-10b5-55d8-864b-c109491d58b4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libraw-bin |
purl2cpe | 2026-07-28 16:41:04.926317 |
pkg:deb/ubuntu/libraw-bin |
purl2cpe | 2026-07-28 16:41:04.926318 |
pkg:github/libraw/libraw |
purl2cpe | 2026-07-28 16:41:04.926320 |
pkg:gitlab/redhat/libraw |
purl2cpe | 2026-07-28 16:41:04.926321 |
pkg:libraw/libraw |
purl2cpe | 2026-07-28 16:41:04.926322 |
pkg:rpm/centos/libraw |
purl2cpe | 2026-07-28 16:41:04.926324 |
pkg:rpm/fedora/libraw |
purl2cpe | 2026-07-28 16:41:04.926325 |
pkg:rpm/opensuse/libraw |
purl2cpe | 2026-07-28 16:41:04.926327 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-24660 |
vulnerable | 2026-06-08 07:51:17.964781 |
Details available
HIGH (8.1)
A heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2026-04-07T13:49:25.335Z
Updated: 2026-07-15T01:17:14.228Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21413 |
vulnerable | 2026-06-08 07:49:16.350814 |
Details available
CRITICAL (9.8)
A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2026-04-07T13:49:29.784Z
Updated: 2026-07-15T01:20:03.411Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-20911 |
vulnerable | 2026-06-08 07:49:13.403261 |
Details available
CRITICAL (9.8)
A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2026-04-07T13:49:31.223Z
Updated: 2026-07-15T01:20:09.518Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-20889 |
vulnerable | 2026-06-08 07:49:13.390772 |
Details available
CRITICAL (9.8)
A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2026-04-07T13:49:27.912Z
Updated: 2026-07-15T01:20:13.747Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.