REDHAT-BUG-2455942: Buffer Overflow

Published Apr 7, 2026

Updated

A heap-based buffer overflow vulnerability exists in the x3fthumbloader functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

Affected Software

1 affected component

Libraw Libraw=d20315b

Event History

Apr 7, 2026

Data Sourced

via Red Hat·03:03 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2455942?

The severity of REDHAT-BUG-2455942 is considered high due to the potential for a heap-based buffer overflow.

How do I fix REDHAT-BUG-2455942?

To fix REDHAT-BUG-2455942, it is recommended to update to a patched version of LibRaw that addresses this vulnerability.

What impact does REDHAT-BUG-2455942 have on affected software?

The impact of REDHAT-BUG-2455942 can lead to application crashes or remote code execution if exploited.

What versions of LibRaw are affected by REDHAT-BUG-2455942?

Only LibRaw version d20315b is affected by REDHAT-BUG-2455942.

How can an attacker exploit REDHAT-BUG-2455942?

An attacker can exploit REDHAT-BUG-2455942 by providing a specially crafted malicious file to the affected application.