Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
LibRaw 0.22.0 may read beyond memory, remote attack
published 7 months ago
Summary
The LibRaw library versions up to 0.22.0 can be tricked into reading data outside its intended memory area when specially crafted image files are processed. This could allow an attacker on the network to crash the application or potentially take control of it. Upgrade to LibRaw 0.22.1 or later to fix the issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Echo | echo | libraw | All versions |
Original advisory text
ECHO-b728-5f8b-4ad6
References
Timeline
Published3 Apr 2026
Updated3 Apr 2026
First seen3 Apr 2026
Sources
ECHO-b728-5f8b-4ad6 · OSV
Track software like this
Free during beta