VulnSocial

CVE-2026-21413Disclosure(libraw / libraw)

LOWCVSS 9.8 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

libraw CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Other references
Weakness type (CWE)
CWE-129CWE-787

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • libraw

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • Peaked at 2 mentions on most recent observed day (2026-04-08)
  • 3 total mentions across 2 days

Affected systems

Vendors
libraw
Products
libraw

2 versions affected across 1 product

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-04-07: 1Mentions · 2026-04-08: 2Technical Details · 2026-04-07: 1Technical Details · 2026-04-08: 204-0704-08
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-04-071
Disclosure1
2026-04-082
Disclosure2
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-21413 A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted malicio… https://www.cve.org/CVERecord?id=CVE-2026-21413

    Post summary

    CVE‑2026‑21413 is a heap‑based buffer overflow in LibRaw's lossless_jpeg_load_raw function, identified in specific commits, with no exploit or patch details provided.

    00010241
    57.0K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-21413 A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted malicio… https://www.cve.org/CVERecord?id=CVE-2026-21413 ----- Traducción: CVE-2026-21413 Exi… http://infoflow.cloud`

    Post summary

    The post announces the discovery of CVE‑2026‑21413, detailing a heap-based buffer overflow in LibRaw’s lossless_jpeg_load_raw function; no PoC, exploit, or patch information is provided.

    0000036
    67 followersView on X
  • CVEFind.com@CveFindCom
    Disclosure

    [CVE-2026-21413: CRITICAL] Vulnerability alert: Heap-based buffer overflow in LibRaw Commit can be exploited by a specially crafted file, allowing attackers to trigger the issue. #CyberSecurity#cve,CVE-2026-21413,#cybersecurity https://cvefind.com/CVE-2026-21413

    Post summary

    The post announces a critical heap-based buffer overflow in LibRaw Commit, highlighting the potential for exploitation via crafted files, but no proof of concept, exploit code, active attacks, patches, or debunking claims are presented.

    0000028
    619 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Applibrawlibraw0.22.0--
Applibrawlibraw0.22.1--

Explore more

Back to dashboardlibraw CVEslibraw vulnerabilities