CVE-2013-2126

CVE-2013-2126 describes multiple double free vulnerabilities in the LibRaw::unpack function within libraw_cxx.cpp of LibRaw versions prior to 0.15.2, affecting various distributions including Canonical, openSUSE, and Ubuntu. An unauthenticated attacker can exploit these flaws remotely by providing a specially crafted Foveon or sRAW image file. This can lead to a denial of service through an application crash and potentially arbitrary code execution, as indicated by its CVSS score of 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P). There is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, nor significant community discussion or media coverage surrounding this vulnerability.