9.8
CVE-2026-20889
- EPSS 0.65%
- Veröffentlicht 07.04.2026 13:49:27
- Zuletzt bearbeitet 15.07.2026 02:18:24
- CVE-Watchlists
- Unerledigt
LoginA heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.65% | 0.463 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| Cisco Talos | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | 7.5 | 1.6 | 5.9 |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
CWE-190 Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
https://bugzilla.redhat.com/show_bug.cgi?id=2455942
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-20889.json
https://talosintelligence.com/vulnerability_reports/TALOS-2026-2358
https://www.talosintelligence.com/vulnerability_reports/TALOS-2026-2358
https://access.redhat.com/errata/RHSA-2026:13284
https://access.redhat.com/errata/RHSA-2026:14224
https://access.redhat.com/errata/RHSA-2026:14655
https://access.redhat.com/errata/RHSA-2026:14673
https://access.redhat.com/security/cve/CVE-2026-20889