Improper Validation of Array Index The advisory has been revoked - it doesn't affect any version of package libraw (opens in a new tab)

Threat Intelligence

1.38% (72^nd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-UBUNTU1604-LIBRAW-15982041
published20 Apr 2026
disclosed7 Apr 2026

Report a new vulnerability Found a mistake?

Introduced: 7 Apr 2026

CVE-2026-21413 (opens in a new tab) CWE-129 (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:16.04.

NVD Description

Note: Versions mentioned in the description apply only to the upstream libraw package and not the libraw package as distributed by Ubuntu.

A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.