CVE-2026-111272Published
LibRaw through 0.22.2 Heap Out-of-Bounds Read via parseNikonMakernote ShotInfo
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-111272 · Microsoft / collected KEV context
cve-program · CVE-2026-111272
- https://hackmd.io/@haind-pwn/libraw-nikon-shotinfo-orientationoffset-oob-read
- https://github.com/LibRaw/LibRaw/blob/b93f6e45c194f5df9b02a43b1af9a54b4f41f33f/src/metadata/nikon.cpp#L873-L967
- https://github.com/LibRaw/LibRaw
- https://www.vulncheck.com/advisories/libraw-through-0.22.2-heap-out-of-bounds-read-via-parsenikonmakernote-shotinfo
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.