CVE-2020-35535: Libraw

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

In LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF()" function (libraw\src\metadata\sony.cpp) when processing srf files.

Affected products

• Libraw Libraw: version 0.20.0 only; version 0.20.1 only; version 0.20.2 only; version 0.21.0 only

Published 2022-09-01. Last modified 2026-06-17.