CVE-2026-5318

Name of the Vulnerable Software and Affected Versions LibRaw versions up to 0.22.0

Description A weakness exists in LibRaw, specifically in the HuffTable::initval function within the src/decompressors/losslessjpeg.cpp file of the JPEG DHT Parser component. This allows for an out-of-bounds write due to manipulation of the bits[] argument. The attack can be initiated remotely and an exploit is publicly available.

Recommendations Upgrade to version 0.22.1 or later to address this issue.