Critical Security Flaw in LibRaw: Arbitrary Code Execution Vulnerabilities
Summary
ALSA-2026:11360: Important: LibRaw security update. Affects LibRaw versions < 0.21.1-2.el9_7. Fixed in 0.21.1-2.el9_7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
LibRaw is a widely used library designed for reading RAW files from digital cameras, supporting formats such as CRW, CR2, NEF, RAF, and DNG. It is essential for photographers and developers who need to process high-quality images directly from camera sensors. However, recent vulnerabilities have been identified that could allow attackers to execute arbitrary code through specially crafted files, posing significant risks to systems utilizing this library.
Vulnerability Detail
The vulnerabilities in LibRaw stem from two critical issues: first, an arbitrary code execution vulnerability that can be triggered by processing a specially crafted malicious file (CVE-2026-24450). Second, a heap-based buffer overflow occurs during lossless JPEG loading, which can also lead to arbitrary code execution (CVE-2026-21413). These vulnerabilities can be exploited by attackers to gain unauthorized access to systems, potentially leading to data breaches or system compromise.
How To Fix
Minimum fixed version
0.21.1-2.el9_7
This is the first release that contains the fix.
sudo dnf update LibRawTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, avoid opening or processing RAW files from untrusted sources until the package is updated. This can help mitigate the risk of exploitation while waiting for the patch to be applied.
Conclusion
The vulnerabilities identified in LibRaw pose significant risks due to the potential for arbitrary code execution. It is essential for users to update their packages promptly to the latest version to safeguard their systems. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for LibRaw →
FAQ
LibRaw is a library used for reading RAW image files from digital cameras, enabling developers to process high-quality images.
Exploitation of these vulnerabilities can lead to arbitrary code execution, allowing attackers to gain unauthorized access to systems.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If an immediate update is not possible, refrain from processing RAW files from untrusted sources as a temporary workaround.
For detailed information, refer to the CVE pages: CVE-2026-21413 and CVE-2026-24450.
Related vulnerabilities
Recent vulnerabilities recorded for LibRaw.
