Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-07-27T00:00:00 LibRaw: LibRaw: Buffer Overflow vulnerability in image processing 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H CWE-120

A flaw was found in LibRaw, an open-source library for processing raw image files. This vulnerability is a buffer overflow, which occurs in the `stretch()` and `fuji_rotate()` functions. A buffer overflow can allow an attacker to overwrite memory, potentially leading to a denial of service or the execution of unauthorized code.

This Important flaw in LibRaw, a library for processing raw image files, is a buffer overflow in the `stretch()` and `fuji_rotate()` functions. Successful exploitation requires a local attacker to trick a user into processing a specially crafted raw image file, which could lead to arbitrary code execution or a denial of service. Red Hat Enterprise Linux 9 is affected, while Red Hat Enterprise Linux 8 and older versions are not vulnerable as they ship with older, unaffected versions of LibRaw or do not contain the vulnerable code. Mitigation for this issue involves avoiding the processing of untrusted raw image files. As this vulnerability resides within a library, there are no direct configuration or operational controls to disable the vulnerable functions without impacting applications that rely on LibRaw for image processing. Red Hat Enterprise Linux 9 2026-08-06T00:00:00Z RHSA-2026:51105 LibRaw-0:0.21.1-2.el9_8.1 Red Hat Enterprise Linux 6 Not affected libraw1394 Red Hat Enterprise Linux 7 Not affected LibRaw Red Hat Enterprise Linux 7 Not affected libraw1394 Red Hat Enterprise Linux 8 Not affected LibRaw Red Hat Enterprise Linux 8 Not affected libraw1394 https://www.cve.org/CVERecord?id=CVE-2026-51235 https://nvd.nist.gov/vuln/detail/CVE-2026-51235 http://libraw.com https://github.com/programmervuln/cveadvisory-/blob/main/CVE-2026-51235