LibRaw 0.22.1
Approved changes feed: RSS · Atom
cpe:2.3:a:libraw:libraw:0.22.1:*:*:*:*:*:*:*
part: a version: 0.22.1 update: *
| Vendor | Libraw (3d0ebedf-f60e-57e5-a38a-8613009f45f5) |
|---|---|
| Product | Libraw (42eb3480-10b5-55d8-864b-c109491d58b4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libraw-bin |
purl2cpe | 2026-07-28 16:41:04.926328 |
pkg:deb/ubuntu/libraw-bin |
purl2cpe | 2026-07-28 16:41:04.926330 |
pkg:github/libraw/libraw |
purl2cpe | 2026-07-28 16:41:04.926331 |
pkg:gitlab/redhat/libraw |
purl2cpe | 2026-07-28 16:41:04.926332 |
pkg:libraw/libraw |
purl2cpe | 2026-07-28 16:41:04.926334 |
pkg:rpm/centos/libraw |
purl2cpe | 2026-07-28 16:41:04.926335 |
pkg:rpm/fedora/libraw |
purl2cpe | 2026-07-28 16:41:04.926337 |
pkg:rpm/opensuse/libraw |
purl2cpe | 2026-07-28 16:41:04.926338 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-24450 |
vulnerable | 2026-06-08 07:51:17.694465 |
Details available
HIGH (8.1)
An integer overflow vulnerability exists in the uncompressed_fp_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2026-04-07T13:49:23.872Z
Updated: 2026-04-13T13:04:17.479Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21413 |
vulnerable | 2026-06-08 07:49:16.350840 |
Details available
CRITICAL (9.8)
A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2026-04-07T13:49:29.784Z
Updated: 2026-07-15T01:20:03.411Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-20911 |
vulnerable | 2026-06-08 07:49:13.403284 |
Details available
CRITICAL (9.8)
A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2026-04-07T13:49:31.223Z
Updated: 2026-07-15T01:20:09.518Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-20884 |
vulnerable | 2026-06-08 07:49:13.387470 |
Details available
HIGH (8.1)
An integer overflow vulnerability exists in the deflate_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2026-04-07T13:49:22.423Z
Updated: 2026-04-13T13:04:17.769Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.