CVE-2026-51235
Received Received - Intake

Buffer Overflow in LibRaw Image Processing Library

Publication date: 2026-07-27

Last updated on: 2026-07-27

Assigner: MITRE

Description
LibRaw 0.21 is vulnerable to Buffer Overflow in the stretch() function (src/libraw_cxx.cpp) and fuji_rotate() function (src/decoders/fuji.cpp).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-27
Last Modified
2026-07-27
Generated
2026-07-27
AI Q&A
2026-07-27
EPSS Evaluated
N/A
NVD
CVE-2026-51235
EUVD
EUVD-2026-49396

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
libraw libraw 0.21

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-122 A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-51235 is a heap-based buffer overflow in LibRaw 0.21 affecting the stretch() and fuji_rotate() functions. Attackers exploit this by providing maliciously crafted RAW image files with manipulated metadata, causing unsafe memory writes due to integer overflows and incorrect variable usage. This leads to heap corruption, crashes, or potential arbitrary code execution.

Detection Guidance

Detect this vulnerability by analyzing network traffic for malformed RAW image files, particularly Fuji RAF format files with manipulated metadata. Use tools like Wireshark to inspect file headers and metadata for suspicious pixel aspect ratios or width/height values. On systems, monitor for crashes in applications linked against LibRaw 0.21 using AddressSanitizer or similar tools.

Impact Analysis

If you process RAW images using LibRaw 0.21, an attacker could crash your application or execute arbitrary code by tricking you into opening a specially crafted file. This could lead to data loss, system compromise, or denial of service.

Compliance Impact

This vulnerability could impact compliance with GDPR and HIPAA by enabling unauthorized code execution or data corruption when processing malformed RAW image files. Exploitation may lead to data breaches, unauthorized access to sensitive information, or system disruptions, which are critical violations under these regulations.

Mitigation Strategies

Immediately update LibRaw to a patched version if available. If no patch exists, restrict processing of RAW image files to trusted sources only. Disable or remove applications linked against vulnerable LibRaw 0.21 versions. Implement network-level controls to block or quarantine suspicious RAW files.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-51235. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart