CVE-2020-35530: Debian Linux

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patched.cpp) that can be triggered via a crafted X3F file.

Affected products

• Debian Debian Linux: version 10.0 only
• Libraw Libraw: version 0.20.0 only; version 0.20.1 only; version 0.20.2 only; version 0.21.0 only

Published 2022-09-01. Last modified 2026-06-17.