PT-2026-27309
CVE-2026-4731
·
Published
2026-03-24
·
Updated
2026-04-30
Description by
CVSS 4.0
8.5
HighMetricsAV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/S:N/AU:N/R:U/V:D/RE:L/U:Amber
Name of the Vulnerable Software and Affected Versions
ART versions prior to 1.25.12
Description
An integer overflow or wraparound issue exists in the ART raw image editor’s
rtengine modules, specifically related to the dcraw.C program file. This can potentially lead to unexpected behavior or crashes.Recommendations
Update to version 1.25.12 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾