CVE-2020-35534: Libraw

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function (libraw\src\decoders\crx.cpp) when processing cr3 files.

Affected products

• Libraw Libraw: version 0.20.0 only; version 0.20.1 only; version 0.20.2 only; version 0.21.0 only

Published 2022-09-01. Last modified 2026-06-17.