Lucene search
HistorySep 01, 2022 - 6:15 p.m.
CVE-2020-35532
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
25.9%
In LibRaw, an out-of-bounds read vulnerability exists within the “simple_decode_row()” function (libraw\src\x3f\x3f_utils_patched.cpp) which can be triggered via an image with a large row_stride field.
Affected configurations
Node
librawlibrawMatch0.20.0-
ORlibrawlibrawMatch0.20.0rc2
ORlibrawlibrawMatch0.20.1
ORlibrawlibrawMatch0.20.2
ORlibrawlibrawMatch0.21.0beta1
Node
debiandebian_linuxMatch10.0
Related
debiancve
debiancve
CVE-2020-35532
2022-09-01 18:15:08
redhatcve
redhatcve
CVE-2020-35532
2022-08-29 21:12:47
prion
prion
Design/Logic Flaw
2022-09-01 18:15:00
ubuntucve
ubuntucve
CVE-2020-35532
2022-09-01 00:00:00
cve
cve
CVE-2020-35532
2022-09-01 18:15:08
veracode
veracode
Out-of-Bounds Read
2022-11-02 01:23:09
osv
osv
CVE-2020-35532
2022-09-01 18:15:08
libraw - security update
2022-09-16 00:00:00
libraw vulnerabilities
2022-11-07 16:57:39
cvelist
cvelist
CVE-2020-35532
2022-09-01 17:51:59
alpinelinux
alpinelinux
CVE-2020-35532
2022-09-01 18:15:08
openvas
openvas
Debian: Security Advisory (DLA-3113-1)
2022-09-17 00:00:00
Ubuntu: Security Advisory (USN-5715-1)
2022-11-08 00:00:00
debian
debian
[SECURITY] [DLA 3113-1] libraw security update
2022-09-16 10:28:18
amazon
amazon
Medium: LibRaw
2023-09-13 23:44:00
ubuntu
ubuntu
LibRaw vulnerabilities
2022-11-07 00:00:00
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : LibRaw vulnerabilities (USN-5715-1)
2022-11-08 00:00:00
Amazon Linux 2 : LibRaw (ALAS-2023-2256)
2023-09-20 00:00:00
RHEL 6 : libraw (Unpatched Vulnerability)
2024-05-11 00:00:00
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
25.9%
Related for NVD:CVE-2020-35532