An integer overflow vulnerability exists in the deflate_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

amazon_alas ALAS2-2026-3258: Amazon Linux 2 Security Advisory:ALAS2-2026-3258

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1556-1 advisory.

    - CVE-2026-5342: out-of-bounds read via `LibRaw::nikon_load_padded_packed_raw` (bsc#1261499).
    - CVE-2026-20884: integer overflow and heap buffer overflow via `deflate_dng_load_raw` (bsc#1261671).
    - CVE-2026-20889: heap-based buffer overflow in `x3f_thumb_loader`(bsc#1261672).
    - CVE-2026-20911: heap-based buffer overflow in `HuffTable::initval`(bsc#1261673).
    - CVE-2026-21413: heap-based buffer overflow in `lossless_jpeg_load_raw` (bsc#1261674).
    - CVE-2026-24660: heap-based buffer overflow in `x3f_load_huffman` (bsc#1261676).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1555-1 advisory.

    - CVE-2026-5342: out-of-bounds read via `LibRaw::nikon_load_padded_packed_raw` (bsc#1261499).
    - CVE-2026-20884: integer overflow and heap buffer overflow via `deflate_dng_load_raw` (bsc#1261671).
    - CVE-2026-20889: heap-based buffer overflow in `x3f_thumb_loader`(bsc#1261672).
    - CVE-2026-20911: heap-based buffer overflow in `HuffTable::initval`(bsc#1261673).
    - CVE-2026-21413: heap-based buffer overflow in `lossless_jpeg_load_raw` (bsc#1261674).
    - CVE-2026-24450: integer overflow and heap buffer overflow via `uncompressed_fp_dng_load_raw`     (bsc#1261675).
    - CVE-2026-24660: heap-based buffer overflow in `x3f_load_huffman` (bsc#1261676).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20574-1 advisory.

    - CVE-2026-5342: crafted TIFF/NEF file can cause an out-of-bounds read (bsc#1261499).
    - CVE-2026-20884: integer overflow vulnerability in the deflate_dng_load_raw (bsc#1261671).
    - CVE-2026-20889: heap-based buffer overflow vulnerability in the x3f_thumb_loader (bsc#1261672).
    - CVE-2026-20911: heap-based buffer overflow vulnerability in the HuffTable: initval (bsc#1261673).
    - CVE-2026-21413: heap-based buffer overflow vulnerability in the lossless_jpeg_load_raw (bsc#1261674).
    - CVE-2026-24450: integer overflow vulnerability in uncompressed_fp_dng_load_raw (bsc#1261675).
    - CVE-2026-24660: heap-based buffer overflow vulnerability in the x3f_load_huffman (bsc#1261676).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-635a001215 advisory.

    Backport patch for CVE-2026-20884.

    ----

    Backport fixes for CVE-2026-20889 CVE-2026-21413 CVE-2026-24450 CVE-2026-24660

    ----

    Update to libraw-0.21.5.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-826db1b5c0 advisory.

    Backport patch for CVE-2026-20884.

    ----

    Backport fixes for CVE-2026-20889 CVE-2026-21413 CVE-2026-24450 CVE-2026-24660

    ----

    Update to libraw-0.21.5.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-bef0050737 advisory.

    LibRaw 0.22.1 and rebuilds

    ----

    Release 3.1.12.0 (Apr 1, 2026) -- compared to 3.1.11.0

    oiiotool: Better type understanding with -i:ch= and other cleanup #5056     texture: Fix texture overblur with st-blur parameters #5071 #5080 (by Pascal Lecocq) (3.1.12.0, 3.0.17.0)     IBA: Handle offset data windows in fillholes_pushpull #5105 (3.1.12.0, 3.0.17.0)     ImageInput: check_open fixes and new validity checks #5087 (3.1.12.0, 3.0.17.0)     bmp: Use check_open to guard against corrupt resolutions #5086 (3.1.12.0, 3.0.17.0)     heif: Fix invalid read writing 8-bit images with dimensions not a multiple of 64 #5095 (by Brecht Van     Lommel)     ico: Various validity checks and error handling for corruptions #5088 (3.1.12.0, 3.0.17.0)     jpeg: Improved safety and error reporting for jpeg and iptc #5081     jpeg2000: Suppress leak when reading with OpenJPH #5098     psd: Fixes against corrupt files with better validation #5089 (3.1.12.0, 3.0.17.0)     rla: Lots of additional validity checking and safety #5094 (3.1.12.0, 3.0.17.0)     tiff: Support GPS fields, and other metadata enhancements #5050     tiff: Fix buffer overrun and improve error reporting #5082, fix wrong number of values passed to     invert_photometric #5083, check for invalid bit depth in palette images #5091     ImageSpec: metadata_val improved safety #5096 (3.1.12.0, 3.0.17.0)     fix: Fix UB-sanitizer warning about alignment #5097     fix: Catch exceptions in print-uncaught-messages destructor #5103     fix: Enhanced exception safety for our use of OpenColorIO #5114     fix: Fix possible fmt exceptions where we might have passed null string #5115     build: Test building with clang 22.1, fix warnings uncovered #5067     build: Improve security by pinning auto-build dependencies by hash #5076     build: Include idiff in the python wheels we build #5104 (3.1.12.0, 3.0.17.0)     build(pybind11): Address new pybind11 float/int auto-conversion behavior #5058     build(win): Embed manifest in OIIO executables to enable long path handling #5066 (by Nathan Rusch)     ci: Add CI test for MSVS 2026 #5060 (3.1.12.0, 3.0.17.0)     ci: For security, replace workflow substitutions with safer env substitutions #5070     ci: Speed up slow benchmarks for debug and sanitizer CI tests #5077     ci: On Mac Intel CI variant, don't install openvdb, for speed #5065 (3.1.12.0, 3.0.17.0)     ci: Bump GitHub Actions to latest versions #5078 #5110 #5119     ci: Fix broken Mac CI and wheel building by specifying full compiler paths #5100 #5101 (3.1.12.0,     3.0.17.0)     ci: Update certificates to be able to install icc #5122 (3.1.12.0, 3.0.17.0)     ci: Turn off nightly workflows for user forks #5042     tests: New ref outputs for tiff-misc, heif no-avif, and ffmpeg 8.1 cases #5075 #5079 #5099 #5112     docs: Update description for dwaCompressionLevel #5074 (by Aamir Raza)     docs: Fix formatting examples for version macros #5073     docs: Keep TextureSystem docs in sync with ImageCache #5085 (3.1.12.0, 3.0.17.0)     docs: Fix typos and incorrect attribute name in a comment #5093 (3.1.12.0, 3.0.17.0)     docs: Fix misstatement about oiiotool --if #5102 (3.1.12.0, 3.0.17.0)     admin: Draft policy on use of AI coding assistants #5072 (3.1.12.0, 3.0.17.0)     ci: Freetype adjustments #4999

    ----

    Update to 5.1 (#2451401)

    ----

    Update to 5.0 (#2447841)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-ffba395f42 advisory.

    LibRaw 0.22.1 and rebuilds.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An integer overflow vulnerability exists in the deflate_dng_load_raw functionality of LibRaw Commit     8dc68e2. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a     malicious file to trigger this vulnerability. (CVE-2026-20884)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
310063	SUSE SLES15 Security Update : libraw (SUSE-SU-2026:1556-1)	Nessus	SuSE Local Security Checks	medium
310058	SUSE SLED15 / SLES15 Security Update : libraw (SUSE-SU-2026:1555-1)	Nessus	SuSE Local Security Checks	medium
309150	openSUSE 16 Security Update : libraw (openSUSE-SU-2026:20574-1)	Nessus	SuSE Local Security Checks	medium
307413	Fedora 43 : mingw-LibRaw (2026-635a001215)	Nessus	Fedora Local Security Checks	critical
307405	Fedora 42 : mingw-LibRaw (2026-826db1b5c0)	Nessus	Fedora Local Security Checks	critical
306255	Fedora 44 : ImageMagick / LibRaw / OpenImageIO / OpenImageIO2.5 / etc (2026-bef0050737)	Nessus	Fedora Local Security Checks	medium
305678	Fedora 45 : ImageMagick / LibRaw / OpenImageIO / OpenImageIO2.5 / etc (2026-ffba395f42)	Nessus	Fedora Local Security Checks	medium
305567	Linux Distros Unpatched Vulnerability : CVE-2026-20884	Nessus	Misc.	critical

Detections

Analytics

CVE-2026-20884

critical

Tenable Plugins

Coming Soon

medium

medium

medium

critical

critical

medium

medium

critical