Skip to content

Libraw · product

Libraw

62 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 62 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. The phase_one_correct function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization.CVE-2015-8367Libraw · 5.6% likely

    CWE-665

  2. Array index error in smal_decode_segment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors…CVE-2015-8366Libraw · 5.1% likely

    CWE-129

  3. Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service (appli…CVE-2013-2126Libraw · 4.5% likely

    CWE-399

  4. A Stack-based Buffer Overflow was discovered in xtrans_interpolate in internal/dcraw_common.cpp in LibRaw before 0.18.3. It could allow a remote denial of service or code executio…CVE-2017-14265Libraw · 4.3% likely

    CWE-119

  5. An error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to corrupt memory.CVE-2017-6886LibRaw · 3.4% likely

    CWE-119

  6. Buffer overflow in the exposure correction code in LibRaw before 0.15.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code…CVE-2013-2127Libraw · 3.4% likely

    CWE-119

  7. LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp, postprocessing/mem_image.cpp, and utils/thumb_utils.cpp. For example, malloc(siz…CVE-2020-15503Libraw · 3.3% likely

    CWE-20

  8. LibRaw::raw2image() in libraw_cxx.cpp has a heap-based buffer overflow.CVE-2018-20365Libraw · 3.0% likely

    CWE-787

  9. There is a floating point exception in the kodak_radc_load_raw function in dcraw_common.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack.CVE-2017-13735Libraw · 3.0% likely

    CWE-20

  10. LibRaw::raw2image in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.CVE-2018-20363Libraw · 2.8% likely

    CWE-476

  11. An error within the "find_green()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause a stack-based buffer overflow and subsequently…CVE-2018-5808Libraw · 2.8% likely

    CWE-787

  12. An error within the "LibRaw::parse_exif()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause a stack-based buffer overflow and subs…CVE-2018-5809Libraw · 2.8% likely

    CWE-787

  13. LibRaw::copy_bayer in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.CVE-2018-20364Libraw · 2.6% likely

    CWE-476

  14. An off-by-one error within the "LibRaw::kodak_ycbcr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.7 can be exploited to cause a heap-based buff…CVE-2018-5800Libraw · 2.5% likely

    CWE-193

  15. An issue was discovered in LibRaw 0.18.9. There is a stack-based buffer overflow in the utf2char function in libraw_cxx.cpp.CVE-2018-10528Libraw · 2.5% likely

    CWE-787

  16. An error within the "parse_rollei()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop.CVE-2018-5818Libraw · 2.3% likely

    CWE-835

  17. An integer overflow error within the "parse_qt()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.12 can be exploited to trigger an infinite loop via a speci…CVE-2018-5815Libraw · 2.2% likely

    CWE-190

  18. LibRaw before 0.18.4 has a heap-based Buffer Overflow in the processCanonCameraInfo function via a crafted file.CVE-2017-14348Libraw · 2.1% likely

    CWE-119

  19. An integer overflow error within the "identify()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.12 can be exploited to trigger a division by zero via speci…CVE-2018-5816Libraw · 2.1% likely

    CWE-190

  20. An error within the "rollei_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause a heap-based buffer overflow and subseque…CVE-2018-5810Libraw · 2.1% likely

    CWE-787

  21. In LibRaw through 0.18.4, an out of bounds read flaw related to kodak_65000_load_raw has been reported in dcraw/dcraw.c and internal/dcraw_common.cpp. An attacker could possibly e…CVE-2017-14608Libraw · 2.1% likely

    CWE-125

  22. An error within the "parse_minolta()" function (dcraw/dcraw.c) in LibRaw versions prior to 0.18.11 can be exploited to trigger an infinite loop via a specially crafted file.CVE-2018-5813Libraw · 2.1% likely

    CWE-835

  23. The "faster LJPEG decoder" in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a craf…CVE-2013-1439Libraw · 2.1% likely
  24. There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified…CVE-2018-20337Libraw · 2.1% likely

    CWE-787

  25. An error within the "LibRaw::unpack()" function (src/libraw_cxx.cpp) in LibRaw versions prior to 0.18.7 can be exploited to trigger a NULL pointer dereference.CVE-2018-5801Libraw · 2.0% likely

    CWE-476

  26. A boundary error within the "quicktake_100_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to cause a stack-based buffer overf…CVE-2018-5805Libraw · 2.0% likely

    CWE-787

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.