Out-of-Bounds Read

libraw.so is vulnerable to out-of-bound reads. A malicious user can pass a file to the kodakradcloadraw function in dcrawcommon.cpp to cause an out-of-bounds read that can crash the application...

Denial Of Service (DoS)

libraw.so is vulnerable to denial of service DoS attacks. A malicious user can pass a RAW file to the identify function in dcrawcommon.cpp to cause a type confusion error that can crash the application...

Denial Of Service (DoS)

libraw.so is vulnerable to denial of service DoS attacks. The vulnerability exists due to a floating point exception in kodakradcloadraw of dcrawcommon.cpp, allowing DoS attacks to occur...

CVE-2017-16909

An error related to the "LibRaw::panasonicloadraw" function dcrawcommon.cpp in LibRaw versions prior to 0.18.6 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash via a specially crafted TIFF image...

CVE-2017-14608

In LibRaw through 0.18.4, an out of bounds read flaw related to kodak65000loadraw has been reported in dcraw/dcraw.c and internal/dcrawcommon.cpp. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash...

CVE-2017-14265

CVE-2017-14265 is a stack-based buffer overflow in LibRaw’s xtrans_interpolate function (internal/dcraw_common.cpp) present in LibRaw releases before 0.18.3. The vulnerability can allow a remote denial of service or code execution when processing crafted images. Public reports from Debian and Mag...

CVE-2017-13735

There is a floating point exception in the kodakradcloadraw function in dcrawcommon.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack...

CVE-2017-6886

An error within the "parsetiffifd" function internal/dcrawcommon.cpp in LibRaw versions before 0.18.2 can be exploited to corrupt memory...

Memory corruption

A boundary error within the "parsetiffifd" function internal/dcrawcommon.cpp in LibRaw versions before 0.18.2 can be exploited to cause a memory corruption via e.g. a specially crafted KDC file with model set to "DSLR-A100" and containing multiple sequences of 0x100 and 0x14A TAGs...