Lucene search

K
cvelistFlexeraCVELIST:CVE-2018-5800
HistoryDec 07, 2018 - 10:00 p.m.

CVE-2018-5800

2018-12-0722:00:00
flexera
www.cve.org

7.4 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.3%

An off-by-one error within the “LibRaw::kodak_ycbcr_load_raw()” function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.7 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash.

CNA Affected

[
  {
    "product": "LibRaw",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to 0.18.7"
      }
    ]
  }
]

7.4 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.3%