n/a LibRaw

Name: n/a LibRaw
Brand: n/a

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical7high18medium0low

updated 2026-10-27

vulnerabilities (26)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-5808US	high8.8	2.81% (86th)	—	no fix	2018-12-07	≤ Prior to 0.18.9
CVE-2018-5809US	high8.8	2.79% (86th)	—	no fix	2018-12-07	≤ Prior to 0.18.9
CVE-2018-5800US	medium6.5	2.55% (85th)	—	no fix	2018-12-07	≤ Prior to 0.18.7
CVE-2018-5815US	medium6.5	2.21% (83rd)	—	no fix	2018-12-07	≤ Prior to 0.18.12
CVE-2018-5816US	medium6.5	2.11% (82nd)	—	no fix	2018-12-07	≤ Prior to 0.18.12
CVE-2018-5810US	high8.8	2.10% (82nd)	—	no fix	2018-12-07	≤ Prior to 0.18.9
CVE-2018-5813US	medium6.5	2.09% (81st)	—	no fix	2018-12-07	≤ Prior to 0.18.11
CVE-2018-5801US	medium6.5	2.04% (81st)	—	no fix	2018-12-07	≤ Prior to 0.18.7
CVE-2018-5805US	high8.8	1.98% (80th)	—	no fix	2018-12-07	≤ Prior to 0.18.8
CVE-2017-16909US	high8.8	1.98% (80th)	—	no fix	2018-12-07	≤ Prior to 0.18.6
CVE-2018-5807US	high8.8	1.98% (80th)	—	no fix	2018-12-07	≤ Prior to 0.18.9
CVE-2018-5802US	high8.8	1.97% (80th)	—	no fix	2018-12-07	≤ Prior to 0.18.7
CVE-2018-5811US	medium6.5	1.93% (80th)	—	no fix	2018-12-07	≤ Prior to 0.18.9
CVE-2018-5812US	medium6.5	1.79% (78th)	—	no fix	2018-12-07	≤ Prior to 0.18.9
CVE-2017-16910US	medium6.5	1.79% (78th)	—	no fix	2018-12-07	≤ Prior to 0.18.6
CVE-2018-5806US	medium6.5	1.69% (77th)	—	no fix	2018-12-07	≤ Prior to 0.18.8
CVE-2018-5804US	medium6.5	1.68% (77th)	—	no fix	2018-12-07	≤ Prior to 0.18.8
CVE-2023-1729US	medium6.5	1.29% (70th)	—	no fix	2023-05-15	≤ LibRaw 0.21.1
CVE-2026-5342US	—	0.73% (54th)	—	no fix	2026-04-02	22 versions
CVE-2026-5318US	medium4.3	0.63% (50th)	—	no fix	2026-04-02	22 versions
CVE-2020-35532US	medium5.5	0.39% (33rd)	—	no fix	2022-09-01	≤ LibRaw 0.21-Beta1, LibRaw 0.20.2, LibRaw 0.20.1, LibRaw 0.20.0, LibRaw 0.20-RC2
CVE-2020-35530US	medium5.5	0.39% (33rd)	—	no fix	2022-09-01	≤ LibRaw 0.21-Beta1, LibRaw 0.20.2, LibRaw 0.20.1, LibRaw 0.20.0, LibRaw 0.20-RC2
CVE-2020-35535US	medium5.5	0.33% (26th)	—	no fix	2022-09-01	≤ LibRaw 0.21-Beta1, LibRaw 0.20.2, LibRaw 0.20.1, LibRaw 0.20.0, LibRaw 0.20-RC2
CVE-2020-35533US	medium5.5	0.30% (23rd)	—	no fix	2022-09-01	≤ LibRaw 0.21-Beta1, LibRaw 0.20.2, LibRaw 0.20.1, LibRaw 0.20.0, LibRaw 0.20-RC2
CVE-2020-35531US	medium5.5	0.30% (23rd)	—	no fix	2022-09-01	≤ LibRaw 0.21-Beta1, LibRaw 0.20.2, LibRaw 0.20.1, LibRaw 0.20.0, LibRaw 0.20-RC2
CVE-2020-35534US	medium5.5	0.26% (17th)	—	no fix	2022-09-01	≤ LibRaw 0.21-Beta1, LibRaw 0.20.2, LibRaw 0.20.1, LibRaw 0.20.0, LibRaw 0.20-RC2

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read9 CVEs
CWE-787Out-of-bounds Write8 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer6 CVEs
CWE-476NULL Pointer Dereference3 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-190Integer Overflow or Wraparound2 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-193Off-by-one Error1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)26 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan