CVE-2026-5318

LibRaw JPEG DHT losslessjpeg.cpp initval out-of-bounds write

State: Published
Severity: 5.3 Medium
Published: Apr 2, 2026
Updated: Apr 7, 2026
Reserved: Apr 1, 2026

Description

A weakness has been identified in LibRaw up to 0.22.0. This impacts the function HuffTable::initval of the file src/decompressors/losslessjpeg.cpp of the component JPEG DHT Parser. This manipulation of the argument bits[] causes out-of-bounds write. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.22.1 will fix this issue. Patch name: a6734e867b19d75367c05f872ac26322464e3995. It is advisable to upgrade the affected component.

Scores

CVSS	Score	Vector	Source
4.0	5.3 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P	VulDB
3.1	4.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C	VulDB
3.0	4.3 Medium	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C	VulDB
2.0	5.0 Medium	AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:OF/RC:C	VulDB

Weaknesses

CWE-787 Out-of-bounds Write
CWE-119 Memory Corruption

Affected Products

Product	Versions
LibRawn/a	0.1Affected 0.2Affected 0.3Affected 0.4Affected 0.5Affected 0.6Affected 0.7Affected 0.8Affected 0.9Affected 0.10Affected 0.11Affected 0.12Affected 0.13Affected 0.14Affected 0.15Affected 0.16Affected 0.17Affected 0.18Affected 0.19Affected 0.20Affected 0.21Affected 0.22.0Affected 0.22.1Not affected

References

VDB-354650 | LibRaw JPEG DHT losslessjpeg.cpp initval out-of-bounds writevdb-entrytechnical-description
VDB-354650 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
Submit #780538 | LibRaw 0.22.0 Out-of-bounds Writethird-party-advisory
https://github.com/LibRaw/LibRaw/issues/794issue-tracking
https://github.com/LibRaw/LibRaw/issues/794#issuecomment-4065342499issue-tracking
https://github.com/biniamf/pocs/tree/main/libraw_lljpegexploit
https://github.com/LibRaw/LibRaw/commit/a6734e867b19d75367c05f872ac26322464e3995patch
https://github.com/LibRaw/LibRaw/releases/tag/0.22.1patch
https://github.com/LibRaw/LibRaw/product

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.