PT-2026-98299

Name of the Vulnerable Software and Affected Versions LibRaw version 0.22.0 Description An incorrect numeric conversion occurs in the parse tiff ifd function when processing the TIFF tag 0x00fe NewSubfileType. A specially crafted RAW, TIFF, or DNG file can provide a NewSubfileType value that...

Mattermost doesn't validate the TIFF IFD offset in the image header before allocating memory

Mattermost versions 11.6.x = 11.6.0, 11.5.x = 11.5.2, 11.5.x = 11.5.3, 11.4.x = 11.4.4, 10.11.x = 10.11.14 fail to validate the TIFF IFD offset in the image header before allocating memory, which allows authenticated users with file upload or posting permissions to cause a denial of service serve...

freeimage:load_from_memory_fuzzer: Heap-buffer-overflow in LibRaw::parse_tiff_ifd

Detailed Report: https://oss-fuzz.com/testcase?key=5823076253433856 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x62d0000003f2 Crash State:...

PT-2023-35704 · Libraw · Libraw

Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: The issue is related to a crash in LibRaw, specifically in the LibRaw::sget4 function, which is called by LibRaw::parseAdobeRAFMakernote and LibRaw::parse tiff ifd. The crash type is reporte...

SUSE CVE-2017-6887

A boundary error within the "parsetiffifd" function internal/dcrawcommon.cpp in LibRaw versions before 0.18.2 can be exploited to cause a memory corruption via e.g. a specially crafted KDC file with model set to "DSLR-A100" and containing multiple sequences of 0x100 and 0x14A TAGs...

PT-2022-36690

Name of the Vulnerable Software and Affected Versions LibRaw affected versions not specified Description The issue is related to a crash in LibRaw, specifically in the LibRaw::sget4 function, which is called by LibRaw::parseAdobeRAFMakernote and LibRaw::parse tiff ifd. The crash type is reported ...

freeimage:load_from_memory_fuzzer: Crash in _MemoryReadProc

Detailed Report: https://oss-fuzz.com/testcase?key=5003343987605504 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x605f85000ec2 Crash State: MemoryReadProc...

LibRaw Null Pointer Dereference Vulnerability

libraw is a C++ library for processing RAWCRW/CR2,NEF,RAF,DNG,andothers format images, supporting various operating systems. A code issue vulnerability exists in LibRaw version 20.0, which originates from a null pointer dereference cpp in parsetiffifd of src/metadata/tiff, which can be exploited ...

PT-2020-15850 · Libraw +1 · Libraw +1

Name of the Vulnerable Software and Affected Versions: libraw version 20.0 Description: The issue is related to a null pointer dereference vulnerability in the parse tiff ifd function located in src/metadata/tiff.cpp. This vulnerability may result in context-dependent arbitrary code execution, bu...

UBUNTU-CVE-2019-9641

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exifprocessIFDinTIFF...

dcraw floating point exception vulnerability (CNVD-2019-00790)

dcraw is a U.S. software developer David J. Coffin developed a set of open source for the camera to shoot the RAW film into PPM or TIFF format picture tool . A floating-point exception vulnerability exists in parsetiffifd in dcraw 9.28 and earlier versions, which can be exploited to cause an...

Code injection

A floating point exception in parsetiffifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code...

UBUNTU-CVE-2018-19566

A heap buffer over-read in parsetiffifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information...

UBUNTU-CVE-2018-19567

A floating point exception in parsetiffifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code...

PT-2018-15011

Name of the Vulnerable Software and Affected Versions dcraw versions through 9.28 Description A floating point exception in the parse tiff ifd function could be used by attackers to crash an application that bundles the dcraw code by supplying malicious files. Recommendations For dcraw versions...

PT-2018-15010

Name of the Vulnerable Software and Affected Versions dcraw versions through 9.28 Description A heap buffer over-read issue exists in the parse tiff ifd function of dcraw, which could allow attackers to crash an application that uses the dcraw code or leak private information by supplying malicio...

DEBIAN-CVE-2017-6887

A boundary error within the "parsetiffifd" function internal/dcrawcommon.cpp in LibRaw versions before 0.18.2 can be exploited to cause a memory corruption via e.g. a specially crafted KDC file with model set to "DSLR-A100" and containing multiple sequences of 0x100 and 0x14A TAGs...

UBUNTU-CVE-2017-6886

An error within the "parsetiffifd" function internal/dcrawcommon.cpp in LibRaw versions before 0.18.2 can be exploited to corrupt memory...

UBUNTU-CVE-2017-6887

A boundary error within the "parsetiffifd" function internal/dcrawcommon.cpp in LibRaw versions before 0.18.2 can be exploited to cause a memory corruption via e.g. a specially crafted KDC file with model set to "DSLR-A100" and containing multiple sequences of 0x100 and 0x14A TAGs...

PT-2017-17395

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.2 Description The issue is related to an error within the parse tiff ifd function, located in internal/dcraw common.cpp, which can be exploited to corrupt memory. Recommendations For versions prior to 0.18.2, upda...