6.9
Medium
CVE-2026-5342 A flaw has been found in LibRaw up to 0.22.0
Description
A flaw has been found in LibRaw up to 0.22.0. This affects the function LibRaw::nikon_load_padded_packed_raw of the file src/decoders/decoders_libraw.cpp of the component TIFF/NEF. Executing a manipulation of the argument load_flags/raw_width can lead to out-of-bounds read. It is possible to launch the attack remotely. The exploit has been published and may be used. Upgrading to version 0.22.1 mitigates this issue. This patch is called b8397cd45657b84e88bd1202528d1764265f185c. It is advisable to upgrade the affected component.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| LibRaw | 0.22.0 | 0.22.1 |
| LibRaw | 0.21 | No fix stated |
| LibRaw | 0.20 | No fix stated |
| LibRaw | 0.19 | No fix stated |
| LibRaw | 0.18 | No fix stated |
| LibRaw | 0.17 | No fix stated |
| LibRaw | 0.16 | No fix stated |
| LibRaw | 0.15 | No fix stated |
| LibRaw | 0.14 | No fix stated |
Show the 13 other branches Hide the 13 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| LibRaw | 0.13 | No fix stated |
| LibRaw | 0.12 | No fix stated |
| LibRaw | 0.11 | No fix stated |
| LibRaw | 0.10 | No fix stated |
| LibRaw | 0.9 | No fix stated |
| LibRaw | 0.8 | No fix stated |
| LibRaw | 0.7 | No fix stated |
| LibRaw | 0.6 | No fix stated |
| LibRaw | 0.5 | No fix stated |
| LibRaw | 0.4 | No fix stated |
| LibRaw | 0.3 | No fix stated |
| LibRaw | 0.2 | No fix stated |
| LibRaw | 0.1 | No fix stated |
References
- VDB-354671 | LibRaw TIFF/NEF decoders_libraw.cpp nikon_load_padded_packed_raw out-of-bounds vuldb.com
- VDB-354671 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #781223 | LibRaw 0.22.0 Out-of-Bounds Read vuldb.com
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of LibRaw
The 26 CVEs of LibRaw →
CVE-2026-5318
A weakness has been identified in LibRaw up to 0.22.0
5.3
Medium
CVE-2023-1729
A flaw was found in LibRaw
Not rated
CVE-2020-35533
In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobe_copy_pixel()" function…
Not rated
CVE-2020-35534
In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function…
Not rated