Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
LibRaw can crash due to uninitialized data
published 4 years ago
Summary
The open‑source LibRaw library may use data that hasn’t been set up correctly, causing the program to stop unexpectedly. This can affect any application that relies on LibRaw for processing raw image files. Update LibRaw to the latest version or apply the provided patch to prevent the crash.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| OSS-Fuzz | – | libraw | All versions |
Original advisory text
Use-of-uninitialized-value in init_main_qtable
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50835
```
Crash type: Use-of-uninitialized-value
Crash state:
init_main_qtable
LibRaw::fuji_decode_strip
LibRaw::fuji_decode_loop
```
```
Crash type: Use-of-uninitialized-value
Crash state:
init_main_qtable
LibRaw::fuji_decode_strip
LibRaw::fuji_decode_loop
```
References
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50835 Third Party Advisory
Timeline
Published2 Sep 2022
Updated20 Oct 2026
First seen20 Oct 2026
Sources
OSV-2022-819 · OSV
Track software like this
Free during beta