Skip to content
Threat Feed

Tag

Libraw

2 briefs RSS
high advisory

LibRaw Heap-Based Buffer Overflow Vulnerability (CVE-2026-24660)

A heap-based buffer overflow vulnerability (CVE-2026-24660) exists in the x3f_load_huffman functionality of LibRaw commit d20315b, where a specially crafted malicious file can lead to a heap buffer overflow.

libraw heap-overflow cve-2026-24660
2r 1t 1c
high advisory

LibRaw Integer Overflow Vulnerability in deflate_dng_load_raw

CVE-2026-20884 is an integer overflow vulnerability in LibRaw's deflate_dng_load_raw function that leads to a heap buffer overflow when processing crafted DNG files.

libraw integer-overflow heap-buffer-overflow cve-2026-20884
2r 1t 1c