DEBIAN-CVE-2017-16909

An error related to the "LibRaw::panasonicloadraw" function dcrawcommon.cpp in LibRaw versions prior to 0.18.6 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash via a specially crafted TIFF image...

DEBIAN-CVE-2018-5801

An error within the "LibRaw::unpack" function src/librawcxx.cpp in LibRaw versions prior to 0.18.7 can be exploited to trigger a NULL pointer dereference...

ALPINE-CVE-2017-16910

An error within the "LibRaw::xtransinterpolate" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read memory access and subsequently a Denial of Service condition...

UBUNTU-CVE-2018-5804

A type confusion error within the "identify" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.8 can be exploited to trigger a division by zero...

CVE-2018-5802

An error within the "kodakradcloadraw" function internal/dcrawcommon.cpp related to the "buf" variable in LibRaw versions prior to 0.18.7 can be exploited to cause an out-of-bounds read memory access and subsequently cause a crash...

DEBIAN-CVE-2018-5806

An error within the "leafhdrloadraw" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.8 can be exploited to trigger a NULL pointer dereference...

Heap overflow

An off-by-one error within the "LibRaw::kodakycbcrloadraw" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.7 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash...

CVE-2018-5801

An error within the "LibRaw::unpack" function src/librawcxx.cpp in LibRaw versions prior to 0.18.7 can be exploited to trigger a NULL pointer dereference...

UBUNTU-CVE-2018-5805

A boundary error within the "quicktake100loadraw" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.8 can be exploited to cause a stack-based buffer overflow and subsequently cause a crash...

CVE-2018-5807

An error within the "samsungloadraw" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.9 can be exploited to cause an out-of-bounds read memory access and subsequently cause a crash...

CVE-2018-5804

A type confusion error within the "identify" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.8 can be exploited to trigger a division by zero...

CVE-2017-16910

CVE-2017-16910 is associated with LibRaw prior to 0.18.6, where the LibRaw::xtrans_interpolate() function in internal/dcraw_common.cpp can be exploited to cause an invalid read memory access and a Denial of Service. The connected documents confirm this CVE as part of LibRaw exposure and list rela...

CVE-2018-5806

CVE-2018-5806 affects LibRaw (dcraw code) prior to 0.18.8, causing a NULL pointer dereference in leaf_hdr_load_raw() within internal/dcraw_common.cpp. Affected projects reference LibRaw/dcraw as the root cause; advisories indicate upgrading to LibRaw 0.18.8+ to remediate. Other related CVEs (e.g....

CVE-2018-5807

CVE-2018-5807 affects LibRaw (libs for RAW image processing) via the Samsung_load_raw() path in internal/dcraw_common.cpp. Versions prior to 0.18.9 are vulnerable to an out-of-bounds memory read that can crash the application. Public details consistently reference the vulnerable function and vers...

CVE-2017-16909

An error related to the "LibRaw::panasonicloadraw" function dcrawcommon.cpp in LibRaw versions prior to 0.18.6 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash via a specially crafted TIFF image...

CVE-2018-5809

LibRaw

CVE-2018-5800

An off-by-one error within the "LibRaw::kodakycbcrloadraw" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.7 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash...

CVE-2018-5808

An error within the "findgreen" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.9 can be exploited to cause a stack-based buffer overflow and subsequently execute arbitrary code...

CVE-2018-5801

CVE-2018-5801 – LibRaw NULL pointer dereference . The provided documents identify LibRaw versions prior to 0.18.7 containing a vulnerability in the LibRaw::unpack() function (src/libraw_cxx.cpp) that can be exploited to trigger a NULL pointer dereference. This condition may allow crashes or denia...

CVE-2018-5800

The vulnerability CVE-2018-5800 targets LibRaw, specifically the LibRaw::kodak_ycbcr_load_raw() function in internal/dcraw_common.cpp. It affects LibRaw versions prior to 0.18.7 and can cause a heap-based buffer overflow, leading to a crash. This is confirmed in the linked vulnerability set (CVE-...