Lucene search
HistorySep 01, 2022 - 6:15 p.m.
CVE-2020-35534
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
23.8%
In LibRaw, there is a memory corruption vulnerability within the “crxFreeSubbandData()” function (libraw\src\decoders\crx.cpp) when processing cr3 files.
Affected configurations
Node
librawlibrawMatch0.20.0-
ORlibrawlibrawMatch0.20.0rc2
ORlibrawlibrawMatch0.20.1
ORlibrawlibrawMatch0.20.2
ORlibrawlibrawMatch0.21.0beta1
Related
osv
osv
CVE-2020-35534
2022-09-01 18:15:08
alpinelinux
alpinelinux
CVE-2020-35534
2022-09-01 18:15:08
veracode
veracode
Denial Of Service (DoS)
2022-11-02 01:24:38
cnvd
cnvd
Libraw has an unspecified vulnerability
2022-09-05 00:00:00
cvelist
cvelist
CVE-2020-35534
2022-09-01 17:54:28
redhatcve
redhatcve
CVE-2020-35534
2022-08-29 21:43:10
debiancve
debiancve
CVE-2020-35534
2022-09-01 18:15:08
ubuntucve
ubuntucve
CVE-2020-35534
2022-09-01 00:00:00
cve
cve
CVE-2020-35534
2022-09-01 18:15:08
prion
prion
Memory corruption
2022-09-01 18:15:00
nessus
nessus
RHEL 8 : libraw (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 6 : libraw (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 7 : libraw (Unpatched Vulnerability)
2024-05-11 00:00:00
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
23.8%
Related for NVD:CVE-2020-35534