CVE-2025-43300

📚 CVE-2025-43300 - 脆弱性の詳細分析 🎯 概要 CVE-2025-43300 は、DNG Digital Negative ファイルの処理におけるバッファオーバーフロー の脆弱性であり、TIFF メタデータと JPEG データの不一致 によって発生し、リモートコード実行 RCE を可能にします。 🔍 1. DNGファイルの構造 階層構造: root@kitploit: DNG File ├── TIFF Container metadados │ ├── Header │ ├── IFD Image File Directory │ │ ├── Tag 277:...

CVE-2025

CVE-2025-43300: iOS/macOS DNG画像処理におけるメモリ破壊 概要 CVE-2025-43300 は、Apple の画像処理フレームワークにおける深刻なメモリ破壊の脆弱性で、iOS 18.6.1 および macOS システムに影響します。この脆弱性は RawCamera.bundle 内の JPEG Lossless デコードコードに存在し、DNG ファイル内の TIFF メタデータと JPEG ストリームパラメータの不整合によって引き起こされます。 脆弱性の詳細 根本原因 この脆弱性は、DNG（Digital...

CVE-2026-24450

An integer overflow vulnerability exists in the uncompressedfpdngloadraw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

UBUNTU-CVE-2026-20884

An integer overflow vulnerability exists in the deflatedngloadraw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

📄 Samsung QuramDng Warp Out-Of-Bounds Read

This python proof of concept demonstrates an out-of-bounds read vulnerability in Samsung's QuramDng image processing library, triggered via a specially crafted DNG Digital Negative file. The script programmatically builds a minimal but valid DNG file containing a malformed WarpRectilinear opcode,...

A look at an Android ITW DNG exploit

Posted by Benoît Sevens, Google Threat Intelligence Group Introduction Between July 2024 and February 2025, 6 suspicious image files were uploaded to VirusTotal. Thanks to a lead from Meta, these samples came to the attention of Google Threat Intelligence Group. Investigation of these images show...

CVE-2024-41863 Adobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability III, when parsing DNG file

Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...