TI-2021-12066 Aliases CVE-2021-32142 GHSA-2vqp-59qv-pmrc

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate…

LOW 36CWE-787Published 2023-02-17 · Updated 2025-03-19

Key facts

Attack vector: Local
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-787 and the CVSS impact.

Summary

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00388 33rd percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed Red Hat: 3 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:libraw:libraw:0.20.0:::::::*	0.20.0	Vulnerable	LibRaw

cpe:2.3:a:libraw:libraw:0.20.0:*:*:*:*:*:*:* Versions 0.20.0 Vulnerable ·LibRaw

Remediation

Red Hat 3 advisories

RHSA-2024:2994 Released 2024-05-22 · Red Hat rating Moderate
LibRaw security update
- Red Hat Enterprise Linux AppStream (v. 8) LibRaw-0.19.5-4.el8
- Red Hat Enterprise Linux CRB (v. 8) LibRaw-devel-0.19.5-4.el8
RHSA-2024:0343 Released 2024-01-23 · Red Hat rating Moderate
LibRaw security update
- Red Hat Enterprise Linux Client (v. 7) LibRaw-0.19.4-2.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) LibRaw-devel-0.19.4-2.el7_9, LibRaw-static-0.19.4-2.el7_9
- Red Hat Enterprise Linux Server (v. 7) LibRaw-0.19.4-2.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7) LibRaw-devel-0.19.4-2.el7_9, LibRaw-static-0.19.4-2.el7_9
- Red Hat Enterprise Linux Workstation (v. 7) LibRaw-0.19.4-2.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) LibRaw-devel-0.19.4-2.el7_9, LibRaw-static-0.19.4-2.el7_9
RHSA-2023:6343 Released 2023-11-07 · Red Hat rating Moderate
LibRaw security update
- Red Hat CodeReady Linux Builder (v. 9) LibRaw-devel-0.20.2-6.el9
- Red Hat Enterprise Linux AppStream (v. 9) LibRaw-0.20.2-6.el9

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat CodeReady Linux Builder (v. 9)	Fixed	RHSA-2023:6343
Red Hat Enterprise Linux AppStream (v. 8)	Fixed	RHSA-2024:2994
Red Hat Enterprise Linux AppStream (v. 9)	Fixed	RHSA-2023:6343
Red Hat Enterprise Linux CRB (v. 8)	Fixed	RHSA-2024:2994
Red Hat Enterprise Linux Client (v. 7)	Fixed	RHSA-2024:0343
Red Hat Enterprise Linux Client Optional (v. 7)	Fixed	RHSA-2024:0343
Red Hat Enterprise Linux Server (v. 7)	Fixed	RHSA-2024:0343
Red Hat Enterprise Linux Server Optional (v. 7)	Fixed	RHSA-2024:0343
Red Hat Enterprise Linux Workstation (v. 7)	Fixed	RHSA-2024:0343
Red Hat Enterprise Linux Workstation Optional (v. 7)	Fixed	RHSA-2024:0343

Timeline

2026-10-02 Threatist record created from CVE-2021-32142
2026-10-03 Alias added: GHSA-2vqp-59qv-pmrc

References

Exploit 1

https://github.com/LibRaw/LibRaw/issues/400

Patch 1

https://github.com/LibRaw/LibRaw/commit/bc3aaf4223fdb70d52d470dae65c5a7923ea2a49

Advisory 3

Other 3

TI-2026-04674 LibRaw TIFF/NEF decoders_libraw.cpp nikon_load_padded_packed_raw out-of-bounds CVSS 4.0MEDIUM 6.9
TI-2020-14361 Buffer Overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspect_ratio.cpp. CVSS 3.1MEDIUM 6.5
TI-2026-04650 LibRaw JPEG DHT losslessjpeg.cpp initval out-of-bounds write CVSS 4.0MEDIUM 5.3
TI-2015-06888 The phase_one_correct function in Libraw before 0.17.1 allows attackers to cause memory… CVSS 3.1CRITICAL 9.8
TI-2026-16934 A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality… CVSS 3.1CRITICAL 9.8
TI-2026-16915 Integer overflow in LibRaw CVSS 3.1CRITICAL 9.8

See all 62 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences