Security update for libraw (moderate)

This update for libraw fixes the following issues: The following security vulnerabilities were addressed: - CVE-2018-5804: Fixed a type confusion error within the identify function that could trigger a division by zero, leading to a denial of service Dos. boo1097975 - CVE-2018-5805: Fixed a...

imagemagick/ping_dng_fuzzer: Use-of-uninitialized-value in LibRaw::parse_sinar_ia

Detailed report: https://oss-fuzz.com/testcase?key=5747962597081088 Project: imagemagick Fuzzer: libFuzzerimagemagickpingdngfuzzer Fuzz target binary: pingdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

LibRaw stack buffer overflow vulnerability (CNVD-2018-26473)

LibRaw is a C++ library developed by the LibRaw team for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. A stack-based buffer overflow vulnerability exists in the 'parsemakernote' function of the dcrawcommon.cpp file in LibRaw version 0.19.1. An attacker can exploit this...

LibRaw 'raw2image' function null pointer backreference vulnerability

LibRaw is a C++ library developed by the LibRaw team for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. A null pointer back-reference vulnerability exists in the 'raw2image' function of the librawcxx.cpp file in LibRaw version 0.19.1. An attacker can exploit this vulnerability to...

LibRaw 'raw2image()' function heap buffer overflow vulnerability

LibRaw is a C++ library developed by the LibRaw team for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. A heap buffer overflow vulnerability exists in the 'raw2image' function of the librawcxx.cpp file in LibRaw. An attacker can exploit this vulnerability to cause a denial of...

LibRaw 'copy_bayer' function null pointer backreference vulnerability

LibRaw is a C++ library developed by the LibRaw team for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. A null pointer back-reference vulnerability exists in the 'copybayer' function of the librawcxx.cpp file in LibRaw version 0.19.1. An attacker can exploit this vulnerability to...

CVE-2018-20365

LibRaw::raw2image in librawcxx.cpp has a heap-based buffer overflow...

Null pointer dereference

LibRaw::copybayer in librawcxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference...

CVE-2018-20365

LibRaw::raw2image in librawcxx.cpp has a heap-based buffer overflow...

CVE-2018-20364

LibRaw::copybayer in librawcxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference...

CVE-2018-20363

LibRaw::raw2image in librawcxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference...

DEBIAN-CVE-2018-20364

LibRaw::copybayer in librawcxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference...

Heap overflow

LibRaw::raw2image in librawcxx.cpp has a heap-based buffer overflow...

Null pointer dereference

LibRaw::raw2image in librawcxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference...

DEBIAN-CVE-2018-20365

LibRaw::raw2image in librawcxx.cpp has a heap-based buffer overflow...

CVE-2018-20364

LibRaw::copybayer in librawcxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference...

DEBIAN-CVE-2018-20363

LibRaw::raw2image in librawcxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference...

CVE-2018-20363

LibRaw::raw2image in librawcxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference...

CVE-2018-20364

CVE-2018-20364 affects LibRaw 0.19.1 where LibRaw::copy_bayer in libraw_cxx.cpp has a NULL pointer dereference. Public documents corroborate the issue and link it to LibRaw 0.19.1; no explicit impact vector or patch version is provided beyond noting the NULL dereference. Other connected sources r...

CVE-2018-20363

CVE-2018-20363 affects LibRaw 0.19.1 with a NULL pointer dereference in LibRaw::raw2image (libraw_cxx.cpp). The connected advisories show patches (e.g., openSUSE openSUSE-2019-94, Ubuntu USN-3989-1) addressing LibRaw vulnerabilities including CVE-2018-20363; other fixes cover CVE-2018-20364 and C...