CVE-2018-5805

LibRaw 0.x is affected by CVE-2018-5805 due to a boundary/stack-based overflow in quicktake_100_load_raw() (internal/dcraw_common.cpp) prior to 0.18.8. The vulnerability can cause a crash. Public advisories reference affected packages (LibRaw in various Red Hat/MiracleLinux/openSUSE updates). Rem...

CVE-2018-5813

CVE-2018-5813 concerns LibRaw’s parse_minolta() in dcraw/dcraw.c. Affected: LibRaw versions prior to 0.18.11. An attacker can exploit this via a crafted file to trigger an infinite loop, as documented in Debian/DLA-2903 and accompanying Red Hat/Nessus references. Debian notes patching in older re...

CVE-2018-5812

CVE-2018-5812: In LibRaw, an error in nikon_coolscan_load_raw() (internal/dcraw_common.cpp) of LibRaw versions prior to 0.18.9 allows a NULL pointer dereference, potentially crashing the application. Affected is LibRaw pre-0.18.9 (details replicated across CVE lists and Debian/OSV entries). Mitig...

CVE-2018-5804

LibRaw contains a type confusion vulnerability in the identify() function (internal/dcraw_common.cpp) that affects versions prior to 0.18.8. The issue can be exploited to trigger a division by zero, potentially causing a crash or denial of service. Affected software is LibRaw before the 0.18.8 pa...

CVE-2018-5816

An integer overflow error within the "identify" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.12 can be exploited to trigger a division by zero via specially crafted NOKIARAW file Note: This vulnerability is caused due to an incomplete fix of CVE-2018-5804...

CVE-2018-5813

An error within the "parseminolta" function dcraw/dcraw.c in LibRaw versions prior to 0.18.11 can be exploited to trigger an infinite loop via a specially crafted file...

CVE-2018-5815

An integer overflow error within the "parseqt" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.12 can be exploited to trigger an infinite loop via a specially crafted Apple QuickTime file...

CVE-2018-5809

An error within the "LibRaw::parseexif" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.9 can be exploited to cause a stack-based buffer overflow and subsequently execute arbitrary code...

CVE-2018-5810

An error within the "rolleiloadraw" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.9 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash...

CVE-2018-5811

An error within the "nikoncoolscanloadraw" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.9 can be exploited to cause an out-of-bounds read memory access and subsequently cause a crash...

CVE-2018-5805

A boundary error within the "quicktake100loadraw" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.8 can be exploited to cause a stack-based buffer overflow and subsequently cause a crash...

CVE-2018-5808

An error within the "findgreen" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.9 can be exploited to cause a stack-based buffer overflow and subsequently execute arbitrary code...

CVE-2018-5811

An error within the "nikoncoolscanloadraw" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.9 can be exploited to cause an out-of-bounds read memory access and subsequently cause a crash...

CVE-2018-5804

A type confusion error within the "identify" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.8 can be exploited to trigger a division by zero...

CVE-2018-5810

An error within the "rolleiloadraw" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.9 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash...

CVE-2018-5816

An integer overflow error within the "identify" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.12 can be exploited to trigger a division by zero via specially crafted NOKIARAW file Note: This vulnerability is caused due to an incomplete fix of CVE-2018-5804...

CVE-2018-5800

An off-by-one error within the "LibRaw::kodakycbcrloadraw" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.7 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash...

CVE-2018-5801

An error within the "LibRaw::unpack" function src/librawcxx.cpp in LibRaw versions prior to 0.18.7 can be exploited to trigger a NULL pointer dereference...

CVE-2018-5809

An error within the "LibRaw::parseexif" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.9 can be exploited to cause a stack-based buffer overflow and subsequently execute arbitrary code...

CVE-2018-5811

CVE-2018-5811 affects LibRaw before 0.18.9, where the function nikon_coolscan_load_raw() in internal/dcraw_common.cpp can be exploited to cause an out-of-bounds memory read and crash. Concordant sources (Debian DLA-2903/OSV/NVD) describe this as part of a broader LibRaw set of vulnerabilities and...