CVE-2020-24870

HIGH 8.8CVE-2020-24870 · Published 02/06/2021 · updated 17/06/2026

In short

CVE-2020-24870 is a HIGH (CVSS 8.8) vulnerability affecting libraw (libraw).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 76.2% of all vulnerabilities.
Fix: update to 0.20.1 or later.

Package	Affected versions	Patched versions
libraw libraw	`< 0.20.1`	`0.20.1`

Libraw before 0.20.1 has a stack buffer overflow via LibRaw::identify_process_dng_fields in identify.cpp.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 0.20.1

0.20.1

More vulnerabilities in libraw

See all →