Lucene search
+L

1895 matches found

OSS-Fuzz
OSS-Fuzz
•added 2020/10/07 6:34 a.m.•22 views

imagemagick:enhance_fuzzer: Use-of-uninitialized-value in LibRaw::ljpeg_diff

Detailed Report: https://oss-fuzz.com/testcase?key=4761222404374528 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: enhancefuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::ljpegdiff...

6.8AI score
SaveExploits0Affected Software1
Fedora
Fedora
•added 2020/09/26 12:15 a.m.•39 views

[SECURITY] Fedora 33 Update: LibRaw-0.20.0-3.fc33

LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. LibRaw is based on the source codes of the dcraw utility, where part of drawbacks have already been eliminated and part will be fixed in future...

5.5CVSS3.3AI score0.01551EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2020/09/26 12:00 a.m.•32 views

Fedora: Security Advisory for LibRaw (FEDORA-2020-2d9d628dd2)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS7.1AI score0.01551EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2020/09/24 11:17 a.m.•28 views

CVE-2020-24890

libraw 20.0 has a null pointer dereference vulnerability in parsetiffifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code execution. Note: this vulnerability occurs only if you compile the software in a certain way...

5.5CVSS6AI score0.01551EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/09/24 11:17 a.m.•20 views

CVE-2020-24889

A buffer overflow vulnerability in LibRaw version 20.0 LibRaw::GetNormalizedModel in src/metadata/normalizemodel.cpp may lead to context-dependent arbitrary code execution...

7.8CVSS6.2AI score0.01444EPSS
SaveExploits1References3
Mageia
Mageia
•added 2020/09/17 10:15 a.m.•73 views

Updated libraw packages fix a security vulnerability

LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpackthumb.cpp, postprocessing/memimage.cpp, and utils/thumbutils.cpp. For example, mallocsizeoflibrawprocessedimaget+T.tlength occurs without validating T.tlength. CVE-2020-15503...

7.5CVSS3.5AI score0.03672EPSS
SaveExploits0References4
OSV
OSV
•added 2020/09/17 10:15 a.m.•18 views

MGASA-2020-0368 Updated libraw packages fix a security vulnerability

LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpackthumb.cpp, postprocessing/memimage.cpp, and utils/thumbutils.cpp. For example, mallocsizeoflibrawprocessedimaget+T.tlength occurs without validating T.tlength. CVE-2020-15503...

7.5CVSS7.5AI score0.03672EPSS
SaveExploits0References5
CNVD
CNVD
•added 2020/09/17 12:00 a.m.•11 views

LibRaw Null Pointer Dereference Vulnerability

libraw is a C++ library for processing RAWCRW/CR2,NEF,RAF,DNG,andothers format images, supporting various operating systems. A code issue vulnerability exists in LibRaw version 20.0, which originates from a null pointer dereference cpp in parsetiffifd of src/metadata/tiff, which can be exploited ...

5.5CVSS7.6AI score0.01551EPSS
SaveExploits1References1
CNVD
CNVD
•added 2020/09/17 12:00 a.m.•11 views

LibRaw Buffer Overflow Vulnerability (CNVD-2020-59710)

LibRaw is a C++ library from the LibRaw team for processing RAW CRW/CR2, NEF, RAF, DNG, andothers format images. A buffer overflow vulnerability exists in LibRaw versions prior to 20.0. The vulnerability originates from LibRaw:: GetNormalizedModel in src/metadata/normalizemodel.cpp. An attacker c...

7.8CVSS7.8AI score0.01444EPSS
SaveExploits1References1
NVD
NVD
•added 2020/09/16 3:15 p.m.•33 views

CVE-2020-24890

libraw 20.0 has a null pointer dereference vulnerability in parsetiffifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code execution. Note: this vulnerability occurs only if you compile the software in a certain way...

5.5CVSS0.01551EPSS
SaveExploits1References3
OSV
OSV
•added 2020/09/16 3:15 p.m.•13 views

CVE-2020-24889

A buffer overflow vulnerability in LibRaw version 20.0 LibRaw::GetNormalizedModel in src/metadata/normalizemodel.cpp may lead to context-dependent arbitrary code execution...

7.8CVSS7.8AI score
SaveExploits0References2
OSV
OSV
•added 2020/09/16 3:15 p.m.•12 views

CVE-2020-24890

libraw 20.0 has a null pointer dereference vulnerability in parsetiffifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code execution. Note: this vulnerability occurs only if you compile the software in a certain way...

5.5CVSS7.3AI score
SaveExploits0References3
OSV
OSV
•added 2020/09/16 3:15 p.m.•6 views

DEBIAN-CVE-2020-24890

libraw 20.0 has a null pointer dereference vulnerability in parsetiffifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code execution. Note: this vulnerability occurs only if you compile the software in a certain way...

5.5CVSS6.1AI score0.01551EPSS
SaveExploits1References1
OSV
OSV
•added 2020/09/16 3:15 p.m.•8 views

DEBIAN-CVE-2020-24889

A buffer overflow vulnerability in LibRaw version 20.0 LibRaw::GetNormalizedModel in src/metadata/normalizemodel.cpp may lead to context-dependent arbitrary code execution...

7.8CVSS8.5AI score0.01444EPSS
SaveExploits1References1
NVD
NVD
•added 2020/09/16 3:15 p.m.•16 views

CVE-2020-24889

A buffer overflow vulnerability in LibRaw version 20.0 LibRaw::GetNormalizedModel in src/metadata/normalizemodel.cpp may lead to context-dependent arbitrary code execution...

7.8CVSS0.01444EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2020/09/16 3:15 p.m.•32 views

CVE-2020-24890

libraw 20.0 has a null pointer dereference vulnerability in parsetiffifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code execution. Note: this vulnerability occurs only if you compile the software in a certain way...

5.5CVSS6.1AI score0.01551EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2020/09/16 3:15 p.m.•17 views

CVE-2020-24889

A buffer overflow vulnerability in LibRaw version 20.0 LibRaw::GetNormalizedModel in src/metadata/normalizemodel.cpp may lead to context-dependent arbitrary code execution...

7.8CVSS7.5AI score0.01444EPSS
SaveExploits1References1
Prion
Prion
•added 2020/09/16 3:15 p.m.•24 views

Buffer overflow

A buffer overflow vulnerability in LibRaw version 20.0 LibRaw::GetNormalizedModel in src/metadata/normalizemodel.cpp may lead to context-dependent arbitrary code execution...

5.1CVSS7.9AI score0.01444EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2020/09/16 3:15 p.m.•21 views

Null pointer dereference

libraw 20.0 has a null pointer dereference vulnerability in parsetiffifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code execution. Note: this vulnerability occurs only if you compile the software in a certain way...

2.6CVSS6AI score0.01551EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2020/09/16 3:15 p.m.•11 views

UBUNTU-CVE-2020-24889

A buffer overflow vulnerability in LibRaw version 20.0 LibRaw::GetNormalizedModel in src/metadata/normalizemodel.cpp may lead to context-dependent arbitrary code execution...

7.8CVSS7.8AI score0.01444EPSS
SaveExploits1References2
Rows per page
Query Builder