5.3
Medium
CVE-2026-5318 A weakness has been identified in LibRaw up to 0.22.0
Description
A weakness has been identified in LibRaw up to 0.22.0. This impacts the function HuffTable::initval of the file src/decompressors/losslessjpeg.cpp of the component JPEG DHT Parser. This manipulation of the argument bits[] causes out-of-bounds write. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.22.1 will fix this issue. Patch name: a6734e867b19d75367c05f872ac26322464e3995. It is advisable to upgrade the affected component.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| LibRaw | 0.22.0 | 0.22.1 |
| LibRaw | 0.21 | No fix stated |
| LibRaw | 0.20 | No fix stated |
| LibRaw | 0.19 | No fix stated |
| LibRaw | 0.18 | No fix stated |
| LibRaw | 0.17 | No fix stated |
| LibRaw | 0.16 | No fix stated |
| LibRaw | 0.15 | No fix stated |
| LibRaw | 0.14 | No fix stated |
Show the 13 other branches Hide the 13 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| LibRaw | 0.13 | No fix stated |
| LibRaw | 0.12 | No fix stated |
| LibRaw | 0.11 | No fix stated |
| LibRaw | 0.10 | No fix stated |
| LibRaw | 0.9 | No fix stated |
| LibRaw | 0.8 | No fix stated |
| LibRaw | 0.7 | No fix stated |
| LibRaw | 0.6 | No fix stated |
| LibRaw | 0.5 | No fix stated |
| LibRaw | 0.4 | No fix stated |
| LibRaw | 0.3 | No fix stated |
| LibRaw | 0.2 | No fix stated |
| LibRaw | 0.1 | No fix stated |
References
- VDB-354650 | LibRaw JPEG DHT losslessjpeg.cpp initval out-of-bounds write vuldb.com
- VDB-354650 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #780538 | LibRaw 0.22.0 Out-of-bounds Write vuldb.com
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of LibRaw
The 26 CVEs of LibRaw →
CVE-2026-5342
A flaw has been found in LibRaw up to 0.22.0
6.9
Medium
CVE-2023-1729
A flaw was found in LibRaw
Not rated
CVE-2020-35533
In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobe_copy_pixel()" function…
Not rated
CVE-2020-35534
In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function…
Not rated