Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 15:09:25 +0000 CVE-2026-111272 — LibRaw through 0.22.2 Heap Out-of-Bounds Read via parseNikonMakernote ShotInfo https://db.gcve.eu/vuln/cve-2026-111272 <p><strong>Affected:</strong> LibRaw</p> <p>LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote() that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image.</p> <p><strong>Affected:</strong> LibRaw</p> <p>LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote() that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image.</p> https://db.gcve.eu/vuln/cve-2026-111272