8 matches found
CVE-2026-4731: Integer Overflow or Wraparound
Integer Overflow or Wraparound vulnerability in artraweditor ART rtengine modules. This vulnerability is associated with program files dcraw.C. This issue affects ART: before 1.25.12...
Out-of-bounds Read
libraw.so is vulnerable to an out-of-bounds read. The vulnerability is due to the kodak65000loadraw function within dcraw.c and dcrawcommon.cpp using unchecked index to access the curve array, potentially leading to accessing memory outside the array's valid range. This issue could allow an...
CVE-2020-22628
Buffer Overflow vulnerability in LibRaw::stretch function in libraw\src\postprocessing\aspectratio.cpp...
The vulnerability of the dcraw/dcraw.c component of the LibRaw image processing library, which allows a hacker to cause a service failure.
The vulnerability of the dcraw/dcraw.c component in the LibRaw image processing library is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...
Denial Of Service (DoS)
Libraw.so is vulnerable to denial of service. An error in the parseminolta function in dcraw/dcraw.c allows an attacker to cause a denial of service condition in the process via an infinite loop using a specially crafted file...
Denial Of Service (DoS) Through Out-of-Bounds Read
libraw.so is vulnerable to denial of service DoS attacks. A malicious user can pass a RAW file to the samsungloadraw function in dcraw.c to cause a out-of-bounds read that can crash the application...
CVE-2018-5813
An error within the "parseminolta" function dcraw/dcraw.c in LibRaw versions prior to 0.18.11 can be exploited to trigger an infinite loop via a specially crafted file...
CVE-2017-14608
In LibRaw through 0.18.4, an out of bounds read flaw related to kodak65000loadraw has been reported in dcraw/dcraw.c and internal/dcrawcommon.cpp. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash...