OPENSUSE-SU-2026:20574-1: libraw&distro=openSUSE Leap 16.0 openSUSE
Vulnerability summary
OPENSUSE-SU-2026:20574-1 is a vulnerability in libraw&distro=openSUSE Leap 16.0 openSUSE with no CVSS score yet.
Advisory lineage
Upstream 7 · Downstream 0 · Related 7Timeline
- 20-04-2026PublishedVulnerability first disclosed.
- 22-04-2026Last modifiedVulnerability information updated.
Description
Security update for libraw This update for libraw fixes the following issues: - CVE-2026-5342: crafted TIFF/NEF file can cause an out-of-bounds read (bsc#1261499). - CVE-2026-20884: integer overflow vulnerability in the deflate_dng_load_raw (bsc#1261671). - CVE-2026-20889: heap-based buffer overflow vulnerability in the x3f_thumb_loader (bsc#1261672). - CVE-2026-20911: heap-based buffer overflow vulnerability in the HuffTable: initval (bsc#1261673). - CVE-2026-21413: heap-based buffer overflow vulnerability in the lossless_jpeg_load_raw (bsc#1261674). - CVE-2026-24450: integer overflow vulnerability in uncompressed_fp_dng_load_raw (bsc#1261675). - CVE-2026-24660: heap-based buffer overflow vulnerability in the x3f_load_huffman (bsc#1261676).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Opensuse1 product
- libraw&distro=openSUSE Leap 16.0< 0.21.4-160000.3.1
1 vendor · 1 product