CVE-2026-20889 | LibRaw d20315b File x3f_thumb_loader integer overflow (TALOS-2026-2358)

A vulnerability marked as critical has been reported in LibRaw d20315b. Affected by this vulnerability is the function x3f_thumb_loader of the component File Handler. The manipulation leads to integer overflow.

This vulnerability is documented as CVE-2026-20889. The attack can be initiated remotely. There is not any exploit available.

It is recommended to apply a patch to fix this issue.