CVE Database›Document archive›CVE-2026-51235

CVE-2026-51235

LibRaw: LibRaw: Buffer Overflow vulnerability in image processing

Loading…

Severity

Important

Red Hat Product Security

7.3

CVSS 3.1

Review impact separately from score.

Published · July 27, 2026

Updated · Unknown

Description

A flaw was found in LibRaw, an open-source library for processing raw image files. This vulnerability is a buffer overflow, which occurs in the stretch() and fuji_rotate() functions. A buffer overflow can allow an attacker to overwrite memory, potentially leading to a denial of service or the execution of unauthorized code.

Mitigation

Mitigation for this issue involves avoiding the processing of untrusted raw image files. As this vulnerability resides within a library, there are no direct configuration or operational controls to disable the vulnerable functions without impacting applications that rely on LibRaw for image processing.

CVSS / CWE

CVSS 3.1 · 7.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CWE not specified