← Database

CVE-2026-24450

HIGH CVSS: 8.1 Published: 2026-04-07 Modified: 2026-06-17

Description

An integer overflow vulnerability exists in the uncompressed_fp_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

Affected Platforms

Libraw Libraw

Weakness Type

CWE-190

References