Numeric Conversion Vulnerability in LibRaw Affects TIFF Processing
CVE-2026-88387

5.5MEDIUM

Key Information:

Vendor

LibRaw

Status
LibRaw
Vendor
CVE Published:
24 September 2026

What is CVE-2026-88387?

LibRaw 0.22.0 has a numeric conversion vulnerability within the LibRaw::parse_tiff_ifd() function, specifically when handling the TIFF tag 0x00fe (NewSubfileType). This flaw can be exploited by using a specially crafted RAW, TIFF, or DNG file that provides an attacker-controlled NewSubfileType value that exceeds the acceptable range for a signed integer. The lack of range validation during conversion to an integer leads to undefined behavior, which can result in process termination and potential denial of service. It highlights the importance of thorough input validation in software design.

References

https://github.com/LibRaw/LibRaw/issues/844
https://github.com/LibRaw/LibRaw/pull/853
https://github.com/LibRaw/LibRaw/commit/b41cbbd61951783e0...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.