CVE-2026-88387

A flaw was found in LibRaw. A remote attacker can exploit this vulnerability by supplying a specially crafted image file containing an out-of-range metadata value. Due to improper range validation during numeric conversion in the parse_tiff_ifd() function, processing the malformed file triggers an application crash, resulting in a Denial of Service (DoS).

This vulnerability is rated as having Moderate severity because exploitation requires user interaction to open an untrusted image file, and the impact is confined to application termination without risk to data confidentiality or integrity. In typical Red Hat deployments, this library is invoked only during image processing workflows rather than continuously listening network services. Additionally, versions of LibRaw included in Red Hat Enterprise Linux releases do not include the affected logic.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.