PT-2026-76149 · Julia · Libraw Jll

Published

2026-08-03

·

Updated

2026-08-03

CVSS v3.1

9.1

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
In LibRaw before 0.21.4, phase one correct in decoders/load mfbacks.cpp allows out-of-buffer access because split col and split row values are not checked in 0x041f tag processing.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

JLSEC-2026-1111

Affected Products

Libraw Jll