Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-20889

Fixed in a distro release EPSS <1%CVSS 9.8

A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

Published 2026-04-07 · CVE record · OSV

Products: LibRaw, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 9

Distro releases

ReleasePackageFixed in
AlmaLinux 8LibRaw0.19.5-6.el8_10
AlmaLinux 8LibRaw-devel0.19.5-6.el8_10
Amazon Linux 2LibRaw0.19.4-1.amzn2.0.7
Amazon Linux 2LibRaw-devel0.19.4-1.amzn2.0.7
Amazon Linux 2LibRaw-static0.19.4-1.amzn2.0.7
Debian 12libraw0.20.2-2.1+deb12u2
Debian 13libraw0.21.4-2+deb13u1
Debian 14libraw0.22.1-1
Red Hat Enterprise Linux 8LibRaw0:0.19.5-6.el8_10
Red Hat Enterprise Linux 8LibRaw-debuginfo0:0.19.5-6.el8_10
Red Hat Enterprise Linux 8LibRaw-debugsource0:0.19.5-6.el8_10
Red Hat Enterprise Linux 8LibRaw-devel0:0.19.5-6.el8_10
Red Hat Enterprise Linux 8LibRaw-samples-debuginfo0:0.19.5-6.el8_10
Red Hat rhel aus 8.4LibRaw0:0.19.5-2.el8_4.1
Red Hat rhel aus 8.4LibRaw-debuginfo0:0.19.5-2.el8_4.1
Red Hat rhel aus 8.4LibRaw-debugsource0:0.19.5-2.el8_4.1
Red Hat rhel aus 8.4LibRaw-samples-debuginfo0:0.19.5-2.el8_4.1
Red Hat rhel aus 8.6LibRaw0:0.19.5-3.el8_6.1
Red Hat rhel aus 8.6LibRaw-debuginfo0:0.19.5-3.el8_6.1
Red Hat rhel aus 8.6LibRaw-debugsource0:0.19.5-3.el8_6.1
Red Hat rhel aus 8.6LibRaw-samples-debuginfo0:0.19.5-3.el8_6.1
Red Hat rhel e4s 8.6LibRaw0:0.19.5-3.el8_6.1
Red Hat rhel e4s 8.6LibRaw-debuginfo0:0.19.5-3.el8_6.1
Red Hat rhel e4s 8.6LibRaw-debugsource0:0.19.5-3.el8_6.1
Red Hat rhel e4s 8.6LibRaw-samples-debuginfo0:0.19.5-3.el8_6.1
Red Hat rhel e4s 8.8LibRaw0:0.19.5-3.el8_8.1
Red Hat rhel e4s 8.8LibRaw-debuginfo0:0.19.5-3.el8_8.1
Red Hat rhel e4s 8.8LibRaw-debugsource0:0.19.5-3.el8_8.1
Red Hat rhel e4s 8.8LibRaw-samples-debuginfo0:0.19.5-3.el8_8.1
Red Hat rhel eus long life 8.4LibRaw0:0.19.5-2.el8_4.1
Red Hat rhel eus long life 8.4LibRaw-debuginfo0:0.19.5-2.el8_4.1
Red Hat rhel eus long life 8.4LibRaw-debugsource0:0.19.5-2.el8_4.1
Red Hat rhel eus long life 8.4LibRaw-samples-debuginfo0:0.19.5-2.el8_4.1
Red Hat rhel tus 8.6LibRaw0:0.19.5-3.el8_6.1
Red Hat rhel tus 8.6LibRaw-debuginfo0:0.19.5-3.el8_6.1
Red Hat rhel tus 8.6LibRaw-debugsource0:0.19.5-3.el8_6.1
Red Hat rhel tus 8.6LibRaw-samples-debuginfo0:0.19.5-3.el8_6.1
Red Hat rhel tus 8.8LibRaw0:0.19.5-3.el8_8.1
Red Hat rhel tus 8.8LibRaw-debuginfo0:0.19.5-3.el8_8.1
Red Hat rhel tus 8.8LibRaw-debugsource0:0.19.5-3.el8_8.1
Red Hat rhel tus 8.8LibRaw-samples-debuginfo0:0.19.5-3.el8_8.1
Rocky Linux 8LibRaw0:0.19.5-6.el8_10
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSlibraw0.20.2-150400.3.21.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSlibraw0.20.2-150400.3.21.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSlibraw0.20.2-150400.3.21.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSlibraw0.20.2-150400.3.21.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7libraw0.21.1-150600.3.10.1
SUSE Linux Enterprise Module for Package Hub 15 SP7libraw0.21.1-150600.3.10.1
SUSE Linux Enterprise Server 15 SP4-LTSSlibraw0.20.2-150400.3.21.1
SUSE Linux Enterprise Server 15 SP5-LTSSlibraw0.20.2-150400.3.21.1
SUSE Linux Enterprise Server 15 SP6-LTSSlibraw0.21.1-150600.3.10.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4libraw0.20.2-150400.3.21.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5libraw0.20.2-150400.3.21.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6libraw0.21.1-150600.3.10.1
SUSE Linux Enterprise Workstation Extension 15 SP7libraw0.21.1-150600.3.10.1
Ubuntu 16.04 LTSdarktableno fix
Ubuntu 16.04 LTSdcrawno fix
Ubuntu 16.04 LTSexactimageno fix
Ubuntu 16.04 LTSkodino fix
Ubuntu 16.04 LTSrawtherapeeno fix
Ubuntu 16.04 LTSufrawno fix
Ubuntu 18.04 LTSdarktableno fix
Ubuntu 18.04 LTSdcrawno fix
Ubuntu 18.04 LTSexactimageno fix
Ubuntu 18.04 LTSkodino fix
Ubuntu 18.04 LTSrawtherapeeno fix
Ubuntu 18.04 LTSufrawno fix
Ubuntu 20.04 LTSdarktableno fix
Ubuntu 20.04 LTSdcrawno fix
Ubuntu 20.04 LTSexactimageno fix
Ubuntu 20.04 LTSkodino fix
Ubuntu 20.04 LTSrawtherapeeno fix
Ubuntu 22.04 LTSdarktableno fix
Ubuntu 22.04 LTSdcrawno fix
Ubuntu 22.04 LTSexactimageno fix
Ubuntu 22.04 LTSkodino fix
Ubuntu 22.04 LTSlibraw0.20.2-2ubuntu2.22.04.3
Ubuntu 22.04 LTSrawtherapeeno fix
Ubuntu 24.04 LTSdarktableno fix
Ubuntu 24.04 LTSdcrawno fix
Ubuntu 24.04 LTSdigikamno fix
Ubuntu 24.04 LTSexactimageno fix
Ubuntu 24.04 LTSkodino fix
Ubuntu 24.04 LTSlibraw0.21.2-2.1ubuntu0.24.04.2
Ubuntu 24.04 LTSrawtherapeeno fix
Ubuntu 25.10darktableno fix
Ubuntu 25.10dcrawno fix
Ubuntu 25.10digikamno fix
Ubuntu 25.10exactimageno fix
Ubuntu 25.10kodino fix
Ubuntu 25.10librawno fix
Ubuntu 25.10rawtherapeeno fix
Ubuntu 26.04 LTSdarktableno fix
Ubuntu 26.04 LTSdcrawno fix
Ubuntu 26.04 LTSdigikamno fix
Ubuntu 26.04 LTSexactimageno fix
Ubuntu 26.04 LTSkodino fix
Ubuntu 26.04 LTSlibraw0.21.5b-1ubuntu1.1
Ubuntu 26.04 LTSrawtherapeeno fix
Ubuntu 26.10darktableno fix
Ubuntu 26.10dcrawno fix
Ubuntu 26.10digikamno fix
Ubuntu 26.10exactimageno fix
Ubuntu 26.10kodino fix
Ubuntu 26.10rawtherapeeno fix
Ubuntu Pro 16.04 LTSdigikamno fix
Ubuntu Pro 18.04 LTSdigikamno fix
Ubuntu Pro 20.04 LTSdigikamno fix
Ubuntu Pro 22.04 LTSdigikamno fix
openSUSE Leap 16.0libraw0.21.4-160000.3.1
openSUSE Tumbleweedlibraw0.22.1-1.1