Skip to main content
VulnerabilityPublished Updated

LibRaw::apply_tiff · Kimageformats: Index-out-of-bounds

Affects kimageformatsSource GCVE Database

0
Severity
Medium

Rated by Threat Radar

Data as of 9 Sep 2026, 15:47 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzkimageformatspkg:generic/kimageformatsOther threatsAffected
  • >=d881a7bbb1562af383bbb6ca20340ad739fb0d13
  • =v5.100.0-rc1
  • =v5.101.0
  • =v5.101.0-rc1
  • =v5.102.0
  • =v5.102.0-rc1
  • =v5.103.0
  • =v5.103.0-rc1
  • =v5.104.0
  • =v5.104.0-rc1
  • =v5.105.0
  • =v5.105.0-rc1
  • =v5.106.0-rc1
  • =v5.99.0
  • =v5.99.0-rc1
  • =v5.106.0
  • =v5.107.0-rc1
  • =v5.107.0
  • =v5.108.0-rc1
  • =v5.108.0
  • =v5.109.0-rc1
  • =v5.109.0
  • =v5.110.0-rc1
  • =v5.110.0
  • =v5.111.0-rc1
  • =v5.111.0
  • =v5.112.0-rc1
  • =v5.245.0
  • =v5.112.0
  • =v5.246.0
  • =v5.113.0-rc1
  • =v5.113.0
  • =v5.247.0
  • =v5.114.0-rc1
  • =v5.248.0
  • =v5.114.0
  • =v5.249.0
  • =v5.115.0-rc1
  • =v5.115.0
  • =v6.0.0
  • =v6.1.0
  • =v5.116.0-rc1
  • =v6.2.0
  • =v5.116.0
  • =v6.3.0-rc1
  • =v6.3.0
  • =v6.4.0-rc1
  • =v6.4.0
  • =v6.5.0-rc1
  • =v6.5.0
  • =v6.6.0-rc1
  • =v6.6.0
  • =v6.7.0-rc1
  • =v6.7.0
  • =v6.8.0-rc1
  • =v6.8.0
  • =v6.9.0-rc1
  • =v6.9.0
  • =v6.10.0-rc1
  • =v6.10.0
  • =v6.11.0-rc1
  • =v6.11.0
  • =v6.12.0-rc1
  • =v6.12.0-rc2
  • =v6.12.0
  • =v6.13.0-rc1
  • =v6.13.0
  • =v6.14.0-rc1
  • =v6.14.0
  • =v6.15.0-rc1
  • =v6.15.0
  • =v6.16.0-rc1
  • =v6.16.0
  • =v6.17.0
  • =v6.17.0-rc1
  • =v6.18.0
  • =v6.18.0-rc1
  • =v6.19.0-rc1
  • =v6.19.0
  • =v6.20.0-rc1
  • =v6.20.0
  • =v6.21.0-rc1
  • =v6.21.0
  • =v6.22.0-rc1
  • =v6.22.0
  • =v6.23.0-rc1
  • =v6.23.0
  • =v6.24.0-rc1
  • =v6.24.0
  • =v6.25.0-rc1
  • =v6.25.0
  • =v6.26.0-rc1
  • =v6.26.0
  • =v6.27.0-rc1
  • =v6.27.0
  • =v6.28.0-rc1
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until a fix is available, avoid processing untrusted TIFF images with the affected kimageformats versions.

Description

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55722 ``` Crash type: Index-out-of-bounds Crash state: LibRaw::apply_tiff LibRaw::parse_jpeg LibRaw::identify ```

References

Community reviews

Loading reviews…