CVE-2018-5805: Libraw

High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days.

A boundary error within the "quicktake_100_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to cause a stack-based buffer overflow and subsequently cause a crash.

Affected products

• Libraw Libraw: before 0.18.8 (fixed in 0.18.8)
• Red Hat Enterprise Linux Desktop: version 7.0 only
• Red Hat Enterprise Linux Server: version 7.0 only
• Red Hat Enterprise Linux Workstation: version 7.0 only

Published 2018-12-07. Last modified 2026-06-17.