LibRaw 0.15.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:libraw:libraw:0.15.0:*:*:*:*:*:*:*

part: a version: 0.15.0 update: *

VendorLibraw (3d0ebedf-f60e-57e5-a38a-8613009f45f5)
ProductLibraw (42eb3480-10b5-55d8-864b-c109491d58b4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libraw-bin purl2cpe 2026-06-01 10:14:46.954645
pkg:deb/ubuntu/libraw-bin purl2cpe 2026-06-01 10:14:46.954646
pkg:github/libraw/libraw purl2cpe 2026-06-01 10:14:46.954647
pkg:gitlab/redhat/libraw purl2cpe 2026-06-01 10:14:46.954649
pkg:libraw/libraw purl2cpe 2026-06-01 10:14:46.954650
pkg:rpm/centos/libraw purl2cpe 2026-06-01 10:14:46.954652
pkg:rpm/fedora/libraw purl2cpe 2026-06-01 10:14:46.954653
pkg:rpm/opensuse/libraw purl2cpe 2026-06-01 10:14:46.954655

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-2126 vulnerable 2026-06-08 05:03:58.511063 Details available
Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed full-color (1) Foveon or (2) sRAW image file.
Published: 2013-08-14T15:00:00.000Z
Updated: 2024-09-17T02:01:31.102Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1439 vulnerable 2026-06-08 05:03:53.983397 Details available
The "faster LJPEG decoder" in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a crafted photo file.
Published: 2013-09-16T19:00:00.000Z
Updated: 2024-08-06T15:04:48.425Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.