CVE-2020-24870: Libraw

High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Libraw before 0.20.1 has a stack buffer overflow via LibRaw::identify_process_dng_fields in identify.cpp.

Affected products

• Libraw Libraw: before 0.20.1 (fixed in 0.20.1)

Published 2021-06-02. Last modified 2026-06-17.