Lucene search
+L

1864 matches found

Positive Technologies
Positive Technologies
added 2023/02/21 12:00 a.m.7 views

PT-2023-36035 · Libraw · Libraw

Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: The issue is related to a heap-buffer-overflow read. Technical details about the crash include the LibRaw buffer datastream::scanf one function, LibRaw::parse mos, and LibRaw::parse tiff ifd...

7AI score
SaveExploits0References2
OSV
OSV
added 2023/02/17 6:15 p.m.9 views

AZL-43756 CVE-2021-32142 affecting package LibRaw 0.19.5-5

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::getschar, int in /src/libraw/src/librawdatastream.cpp...

7.8CVSS6.4AI score0.00424EPSS
SaveExploits1References1
NVD
NVD
added 2023/02/17 6:15 p.m.20 views

CVE-2021-32142

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::getschar, int in /src/libraw/src/librawdatastream.cpp...

7.8CVSS7.6AI score0.00424EPSS
SaveExploits1References8
OSV
OSV
added 2023/02/17 6:15 p.m.25 views

CVE-2021-32142

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::getschar, int in /src/libraw/src/librawdatastream.cpp...

7.8CVSS7.5AI score
SaveExploits0References8
OSV
OSV
added 2023/02/17 6:15 p.m.10 views

DEBIAN-CVE-2021-32142

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::getschar, int in /src/libraw/src/librawdatastream.cpp...

7.8CVSS5.9AI score0.00424EPSS
SaveExploits1References1
OSV
OSV
added 2023/02/17 6:15 p.m.11 views

AZL-45267 CVE-2021-32142 affecting package LibRaw for versions less than 0.21.3-1

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::getschar, int in /src/libraw/src/librawdatastream.cpp...

7.8CVSS6.4AI score0.00424EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2023/02/17 6:15 p.m.42 views

CVE-2021-32142

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::getschar, int in /src/libraw/src/librawdatastream.cpp...

7.8CVSS6.4AI score0.00424EPSS
SaveExploits1References4
OSV
OSV
added 2023/02/17 6:15 p.m.9 views

UBUNTU-CVE-2021-32142

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::getschar, int in /src/libraw/src/librawdatastream.cpp...

7.8CVSS6.3AI score0.00424EPSS
SaveExploits1References5
Prion
Prion
added 2023/02/17 6:15 p.m.29 views

Buffer overflow

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::getschar, int in /src/libraw/src/librawdatastream.cpp...

4.4CVSS7.5AI score0.00424EPSS
SaveExploits1References8Affected Software1
CVE
CVE
added 2023/02/17 12:00 a.m.161 views

CVE-2021-32142

LibRaw contains a stack buffer overflow in LibRaw_buffer_datastream::gets(char*, int) on Linux/Unix (affecting v0.20.0 as noted). Consequence: potential privilege escalation or crash when processing crafted RAW files. Affected entries in connected advisories indicate upgrades exist (e.g., Debian ...

7.8CVSS7.4AI score0.00424EPSS
SaveExploits1References8Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/17 12:00 a.m.7 views

CVE-2021-32142

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::getschar, int in /src/libraw/src/librawdatastream.cpp...

7.7AI score0.00424EPSS
SaveExploits1References8
Cvelist
Cvelist
added 2023/02/17 12:00 a.m.31 views

CVE-2021-32142

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::getschar, int in /src/libraw/src/librawdatastream.cpp...

7.8AI score0.00424EPSS
SaveExploits1References8
Debian CVE
Debian CVE
added 2023/02/17 12:00 a.m.30 views

CVE-2021-32142

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::getschar, int in /src/libraw/src/librawdatastream.cpp...

7.8CVSS6.1AI score0.00424EPSS
SaveExploits1
CNNVD
CNNVD
added 2023/02/17 12:00 a.m.7 views

Libraw 缓冲区错误漏洞

Libraw is a C++ library from Libraw for processing RAW CRW/CR2, NEF, RAF, DNG, andothers format images, supporting various operating systems. A security vulnerability exists in Libraw version v0.20.0, which originated from a vulnerability that allows an attacker to elevate privileges via...

7.8CVSS6AI score0.00424EPSS
SaveExploits1References12
SUSE CVE
SUSE CVE
added 2023/02/15 5:41 a.m.7 views

SUSE CVE-2013-1439

The "faster LJPEG decoder" in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cause a denial of service NULL pointer dereference via a crafted photo file...

4.3CVSS6.6AI score0.01779EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:39 a.m.10 views

SUSE CVE-2013-2127

Buffer overflow in the exposure correction code in LibRaw before 0.15.1 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors...

7.5CVSS8AI score0.03287EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:39 a.m.12 views

SUSE CVE-2013-2126

Multiple double free vulnerabilities in the LibRaw::unpack function in librawcxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service application crash and possibly execute arbitrary code via a malformed full-color 1 Foveon or 2 sRAW image file...

7.5CVSS7.9AI score0.04534EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:12 a.m.6 views

SUSE CVE-2015-8366

Array index error in smaldecodesegment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes...

9.8CVSS8AI score0.05075EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:12 a.m.8 views

SUSE CVE-2015-8367

The phaseonecorrect function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization...

9.8CVSS7.5AI score0.05604EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 4:48 a.m.7 views

SUSE CVE-2017-6886

An error within the "parsetiffifd" function internal/dcrawcommon.cpp in LibRaw versions before 0.18.2 can be exploited to corrupt memory...

5.6CVSS9.2AI score0.03362EPSS
SaveExploits0References4
Rows per page
Query Builder