CVE-2026-24450

An integer overflow vulnerability exists in the uncompressed_fp_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

• CWE-190

• https://talosintelligence.com/vulnerability_reports/TALOS-2026-2363Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2026-2363Exploit, Third Party Advisory

Published

Apr 7, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-24444SDMC NE6037 cable modem routers running firmware 7.1.6.0.25 …9.8
• CVE-2026-24445The WebSocket Application Programming Interface lacks restri…9.8
• CVE-2026-24447If a malformed data is input to the affected product, a CSV …6.5
• CVE-2026-24448Use of hard-coded credentials issue exists in MR-GM5L-S1 and…9.8
• CVE-2026-24449For WRC-X1500GS-B and WRC-X1500GSA-B, the initial passwords …5.1
• CVE-2026-2445The affected product accepts user-supplied input within a UR…6.1
• CVE-2026-24451Gitea 1.26.2 allows fork synchronization to continue after a…7.5
• CVE-2026-24452An OS command injection vulnerability exists in XWEB Pro v…8.8
• CVE-2026-24455The embedded web interface of the device does not support HT…7.5
• CVE-2026-24457An unsafe parsing of OpenMQ's configuration in OpenMQ versio…9.8
• CVE-2026-24458Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.1…7.5
• CVE-2026-2446The PowerPack for LearnDash WordPress plugin before 1.3.0 do…9.8