CVE-2017-14348: LibRaw before 0.18.4 has a heap-based Buffer Overflow in the processCanonCameraInfo function via a crafted...

Security readout for executives and security teams

LibRaw versions before 0.18.4 could mishandle a crafted image file and trigger a heap-based buffer overflow. The business risk depends on where LibRaw is used, especially services that accept or automatically process Canon RAW files from users, customers, or external partners. Exposure is most likely in applications, services, or background jobs that include LibRaw before 0.18.4 and process untrusted RAW image files. The bundle does not identify downstream products or packaged distributions. Treat this as an inventory and patch-management item, not a confirmed emergency. Prioritize systems that process externally supplied RAW images because file parser memory bugs can cross trust boundaries. Mitigation focus: Inventory direct and transitive LibRaw usage across image-processing components.; Upgrade LibRaw to 0.18.4 or later where the library is present.; Check vendor or distribution advisories for packaged LibRaw builds..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.