Critical
CVE-2026-21413
A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Announced Group revision 1
Original source ↗CVE-2026-21413
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-21413
LibRaw
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "LibRaw",
"product": "LibRaw",
"versions": [
{
"status": "affected",
"version": "Commit 0b56545"
},
{
"status": "affected",
"version": "Commit d20315b"
}
]
}
]- Related CVEs
- CVE-2026-21413
Source reference:
/cveMetadata/cveId
Publisher severity
critical
Source reference: /containers/cna/metrics
- Event
- #21313 · Revision 1
- Added to Heist Feed
- Publisher date