Loading story…
A high-severity vulnerability tracked as CVE-2026-51235 has been disclosed in LibRaw 0.21, affecting the stretch() function in src/libraw_cxx.cpp and the fuji_rotate() function in src/decoders/fuji.cpp. The flaw is classified as CWE-122 and described as a buffer overflow that could allow compromise of confidentiality, integrity, and availability. The CVSS v3.1 vector published for the issue is AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating remote exploitation is possible with low attack complexity but requires user interaction.
The CVE record was updated with SSVC metadata stating that proof-of-concept exploitation exists, automation is not currently indicated, and the technical impact is total. Public references tied to the disclosure include the LibRaw project and a GitHub advisory repository, where an update for CVE-2026-51235 was also posted, signaling active tracking of the issue as defenders assess exposure in applications that process raw image files through the affected library.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
The CVE record for CVE-2026-51235 was updated to add a CVSS v3.1 vector, classify the issue as CWE-122, and include SSVC metadata indicating proof-of-concept exploitation, no automation, and total technical impact. The vulnerability affects LibRaw 0.21 and is described as a buffer overflow in the stretch() and fuji_rotate() functions.
A GitHub repository entry for CVE-2026-51235 was updated by the account "programmervuln" in commit d3d42a6. The available snippet does not include additional technical details beyond the existence of the update.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
LibRaw 0.22.1 was released with security fixes for multiple high-severity memory corruption and integer overflow vulnerabilities in the library’s RAW image parsing code, including **CVE-2026-21413** in `lossless_jpeg_load_raw`, **CVE-2026-20889** in `x3f_thumb_loader`, and **CVE-2026-20884** in `deflate_dng_load_raw`. The flaws were reported by Cisco Talos and affect parsing paths for formats such as Canon `CR2`, Sigma `X3F`, and DNG files, where crafted metadata or compressed image data can trigger heap-based buffer overflows or undersized allocations followed by out-of-bounds writes.
Jun 29, 2026
Two high-severity vulnerabilities, **CVE-2026-33848** and **CVE-2026-33849**, were disclosed in **LinkingVision rapidvms**, both classified as **CWE-119** improper restriction of operations within the bounds of a memory buffer. The flaws affect **rapidvms versions before `PR#96`** and carry the same **CVSS v3.1** vector, `AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`, indicating network-reachable exploitation with low attack complexity, no required privileges, user interaction, and potential for high impact across confidentiality, integrity, and availability. Both CVE records point to **GitHub pull request `#96`** in the `linkingvision/rapidvms` repository as the referenced fix or related remediation. Organizations running vulnerable rapidvms builds should review the changes in that pull request, identify any exposed instances, and prioritize upgrading or patching affected systems because successful exploitation could lead to severe compromise of the video management platform.
Jun 29, 2026
Fuji Electric **V-SFT** versions `6.2.10.0` and earlier were reported with two vulnerabilities triggered by opening a crafted `V7` file. **CVE-2026-32928** is a stack-based buffer overflow in `VS6ComFile!CSaveData::_conv_AnimationItem` that can lead to arbitrary code execution, while **CVE-2026-32929** is an out-of-bounds read in `VS6ComFile!get_macro_mem_COM` that can expose information from the affected product. Both issues were reported through **JPCERT/CC** and classified under **CWE-121** and **CWE-125**, respectively, with severity assessments published using **CVSS v3.1** and **CVSS v4.0**. The vulnerabilities affect engineering software used in industrial environments, and vendor and advisory references were published by **Fuji Electric** and **JVN**, indicating that organizations using V-SFT should identify affected installations and prioritize remediation.
Jun 29, 2026