CVE-2018-20337: Libraw

High severity, CVSS 8.8. EPSS: 2.1% chance of exploitation in the next 30 days.

There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact.

Affected products

• Libraw Libraw: version 0.19.1 only

Published 2018-12-21. Last modified 2026-06-17.