CVE-2026-24450

An integer overflow vulnerability exists in the uncompressed_fp_dng_load_raw functionality of LibRaw, specifically in Commit 8dc68e2. This vulnerability can be triggered by a specially crafted malicious file, which may lead to a heap buffer overflow. An attacker is able to provide such a malicious file to exploit this vulnerability.

‍