CVE-2026-51235
LibRaw: LibRaw: Buffer Overflow vulnerability in image processing
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 27, 2026
Updated · Unknown
Description
A flaw was found in LibRaw, an open-source library for processing raw image files. This vulnerability is a buffer overflow, which occurs in the stretch() and fuji_rotate() functions. A buffer overflow can allow an attacker to overwrite memory, potentially leading to a denial of service or the execution of unauthorized code.
Mitigation
Mitigation for this issue involves avoiding the processing of untrusted raw image files. As this vulnerability resides within a library, there are no direct configuration or operational controls to disable the vulnerable functions without impacting applications that rely on LibRaw for image processing.
CVSS / CWE
CVSS 3.1 · 7.3CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE not specified