LibRaw, a widely used library for reading raw image files, contains a heap-based out-of-bounds read in the parseNikonMakernote() function. The flaw allows a carefully crafted Nikon NEF/TIFF file to read past the bounds of a short ShotInfo buffer, which can cause the application that performs the decoding to crash. The vulnerability does not grant code execution or compromise confidentiality; its primary effect is to interrupt normal operation. The weakness is identified as CWE-125.

The affected vendor is LibRaw, with all releases up to and including version 0.22.2 susceptible to the issue. No specific sub‑versions are listed, so any occurrence of the library within that range that parses Nikon metadata may be impacted.

The CVSS score of 6.8 classifies the vulnerability as moderate, and the EPSS score is < 1%, indicating a very low exploitation probability. The point of attack is a malicious Nikon NEF/TIFF file supplied to an application that uses LibRaw to decode the image. Since the vulnerability only causes a crash, exploitation conditions are limited to environments where image files are processed from untrusted sources. The vulnerability is not listed in the CISA KEV catalog, further suggesting limited current exploitation in the wild. Nevertheless, a crash can lead to denial of service, impacting availability of the affected application or system.