CVE-2026-20884

An integer overflow vulnerability exists in the deflate_dng_load_raw functionality of LibRaw, specifically in Commit 8dc68e2. A specially crafted malicious file may lead to a heap buffer overflow. An attacker can exploit this vulnerability by providing such a malicious file.

‍