Apple RawCamera 9420 Canon sRAW Heap Out-Of-Bounds Write

Apple RawCamera version 9420 contains a heap out-of-bounds write in its Canon sRAW decoder. A crafted CR2 proof of concept bypasses geometry validation and causes a negative row step to write before the pixel buffer. https://packetstorm.news/download/238925...