REDHAT-BUG-2455929: Buffer Overflow

Published Apr 7, 2026

Updated

A heap-based buffer overflow vulnerability exists in the losslessjpegloadraw functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

Affected Software

1 affected component

Libraw Libraw=0b56545, =d20315b

Event History

Apr 7, 2026

Data Sourced

via Red Hat·03:02 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2455929?

REDHAT-BUG-2455929 is classified as a moderate severity vulnerability due to the potential for heap-based buffer overflow.

How do I fix REDHAT-BUG-2455929?

To fix REDHAT-BUG-2455929, update LibRaw to a version that is not affected by this vulnerability.

What is the impact of REDHAT-BUG-2455929?

The impact of REDHAT-BUG-2455929 could allow an attacker to execute arbitrary code via a specially crafted malicious file.

Which versions of LibRaw are affected by REDHAT-BUG-2455929?

LibRaw versions 0b56545 and d20315b are specifically affected by REDHAT-BUG-2455929.

Can REDHAT-BUG-2455929 be exploited remotely?

Yes, REDHAT-BUG-2455929 can potentially be exploited remotely if an attacker can trick a user into processing a malicious file.