SB2026101426 - Multiple vulnerabilities in Raw Image Extension

Description

This security bulletin contains information about 2 vulnerabilities.

1) Heap-based buffer overflow (CVE-ID: CVE-2026-96202)

CWE-ID: CWE-122 - Heap-based Buffer Overflow

CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to execute arbitrary code.

The vulnerability exists due to a heap-based buffer overflow in Windows Raw Image Extension when processing specially crafted files. A remote attacker can trick a user into opening a specially crafted file to execute arbitrary code.

2) Integer overflow (CVE-ID: CVE-2026-96943)

CWE-ID: CWE-190 - Integer overflow

CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to execute arbitrary code.

The vulnerability exists due to integer overflow or wraparound in Windows Raw Image Extension when generating thumbnails or previews of RAW image files. A remote attacker can convince a user to navigate to a folder containing a specially crafted RAW image file to execute arbitrary code.

The user does not need to open the file.

Remediation

Install update from vendor's website.

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-96202
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-96943