Red Hat Security Advisory

RHSA-2026:15924

LibRaw security update

Released 2026-05-11 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2026-19882 CVE-2026-24660 · GHSA-6mmg-qj2r-7jcf

MEDIUM 44

A heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw Commit d20315b.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00716 Published 2026-04-07 Partial fix CWE-190