Direct Vulnerabilities

Known vulnerabilities in the libraw package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
CVE-2026-88387

*
  • C
Improper Validation of Array Index

<0.22.1-1
  • C
Integer Overflow or Wraparound

<0.22.1-1
  • C
Integer Overflow or Wraparound

<0.22.1-1
  • C
Incorrect Calculation of Buffer Size

<0.22.1-1
  • C
Integer Overflow or Wraparound

<0.22.1-1
  • C
Integer Overflow or Wraparound

<0.22.1-1
  • M
Out-of-Bounds

<0.22.1-1
  • M
Out-of-Bounds

<0.22.1-1
  • C
Out-of-bounds Read

<0.21.4-1
  • M
Allocation of Resources Without Limits or Throttling

<0.20.0-4
  • M
Out-of-bounds Read

<0.18.11-1
  • M
Buffer Overflow

<0.20.0-4
  • M
Out-of-bounds Write

<0.18.7-1
  • M
Out-of-bounds Read

<0.20.0-4
  • C
Out-of-Bounds

<0.18.2-2
  • H
Out-of-bounds Write

<0.18.11-1
  • C
Out-of-Bounds

<0.18.5-1
  • M
Out-of-bounds Read

<0.18.6-1
  • L
Resource Management Errors

<0.15.3-1
  • M
Out-of-bounds Write

<0.20.0-4
  • H
Resource Exhaustion

<0.19.1-1
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

<0.18.11-1
  • M
NULL Pointer Dereference

<0.18.11-1
  • M
NULL Pointer Dereference

<0.19.2-2
  • C
Improper Validation of Array Index

<0.17.1-1
  • L
Out-of-bounds Write

<0.18.8-1
  • H
Buffer Overflow

<0.20.2-1
  • M
Out-of-bounds Read

<0.20.0-4
  • H
Out-of-bounds Write

<0.20.2-1
  • M
Out-of-bounds Read

<0.20.0-4
  • C
Improper Validation of Specified Quantity in Input

<0.21.4-1
  • C
Out-of-bounds Read

<0.21.4-1
  • M
Out-of-bounds Read

<0.20.0-4
  • M
Out-of-bounds Write

<0.20.2-2.1
  • H
Out-of-Bounds

<0.18.6-1
  • H
Out-of-Bounds

<0.18.2-2
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<0.19.1-1
  • M
Out-of-bounds Write

<0.19.2-2
  • L
Integer Overflow or Wraparound

<0.18.13-1
  • M
NULL Pointer Dereference

<0.18.7-1
  • M
Numeric Errors

<0.16.2-1
  • H
Out-of-bounds Write

<0.18.11-1
  • M
NULL Pointer Dereference

<0.19.2-2
  • L
Divide By Zero

<0.18.8-1
  • L
Out-of-bounds Write

<0.18.11-1
  • L
Out-of-bounds Read

<0.18.5-1
  • M
CVE-2013-1439

<0.15.4-1
  • H
Incorrect Type Conversion or Cast

<0.19.1-1
  • H
Out-of-bounds Write

<0.18.11-1
  • H
Improper Input Validation

<0.20.0-4
  • H
Out-of-bounds Read

<0.18.11-1
  • H
Out-of-bounds Read

<0.18.7-1
  • L
Improper Input Validation

<0.18.5-1
  • H
Out-of-Bounds

<0.18.5-1
  • M
CVE-2013-1438

<0.15.4-1
  • H
Out-of-bounds Write

<0.20.2-2.1
  • L
NULL Pointer Dereference

*
  • L
NULL Pointer Dereference

<0.18.8-1
  • C
Out-of-bounds Read

<0.21.4-1
  • L
Integer Overflow or Wraparound

<0.18.13-1
  • H
Out-of-bounds Write

<0.19.2-1
  • L
Out-of-bounds Read

<0.18.11-1
  • C
Improper Initialization

<0.17.1-1