VulnSocial

CVE-2026-20911Disclosure(libraw / libraw)

LOWCVSS 9.8 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

libraw CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Other references
Weakness type (CWE)
CWE-131CWE-120

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • libraw

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • Peaked at 2 mentions on most recent observed day (2026-04-08)
  • 3 total mentions across 2 days

Affected systems

Vendors
libraw
Products
libraw

2 versions affected across 1 product

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-04-07: 1Mentions · 2026-04-08: 2Technical Details · 2026-04-07: 1Technical Details · 2026-04-08: 204-0704-08
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-04-071
Disclosure1
2026-04-082
Disclosure2
Full discourse3 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-20911 A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted malicious f… https://www.cve.org/CVERecord?id=CVE-2026-20911 ----- Traducción: CVE-2026-20911 Exi… http://infoflow.cloud`

    Post summary

    The post announces CVE‑2026‑20911 as a heap‑based buffer overflow vulnerability in LibRaw, providing technical details but no exploitation or mitigation information.

    0000035
    67 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-20911 A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted malicious f… https://www.cve.org/CVERecord?id=CVE-2026-20911

    Post summary

    CVE‑2026‑20911 discloses a heap‐based buffer overflow in LibRaw’s HuffTable::initval, citing specific commits, but offers no proof‑of‑concept, exploit code, patch details, or evidence of active exploitation.

    00000251
    57.0K followersView on X
  • CVEFind.com@CveFindCom
    Disclosure

    [CVE-2026-20911: CRITICAL] Vulnerability alert: LibRaw versions 0b56545 & d20315b are prone to heap-based buffer overflow via malicious file. Attackers can exploit this flaw. #CyberSecurity#cve,CVE-2026-20911,#cybersecurity https://cvefind.com/CVE-2026-20911

    Post summary

    A critical heap‑based buffer overflow affecting specific LibRaw versions has been disclosed, but no PoC, exploit, or patch information is provided.

    0000025
    619 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Applibrawlibraw0.22.0--
Applibrawlibraw0.22.1--

Explore more

Back to dashboardlibraw CVEslibraw vulnerabilities