A flaw was found in LibRaw. A remote attacker can exploit this vulnerability by supplying a specially crafted image file containing an out-of-range metadata value. Due to improper range validation during numeric conversion in the parse_tiff_ifd() function, processing the malformed file triggers an application crash, resulting in a Denial of Service (DoS).
Last checked: 2026-09-29 04:06 UTC
Proof of concept · CISA Coordinator (Assessed 2026-09-29 02:38 UTC)
Fix evidence last checked: 2026-09-29 03:25 UTC