Lucene search
+L

8 matches found

Positive Technologies
Positive Technologies
•added 2026/08/03 12:00 a.m.•5 views

PT-2026-76154

An integer overflow vulnerability exists in the uncompressed fp dng load raw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

9.8CVSS6.4AI score0.00568EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/08/03 12:00 a.m.•4 views

PT-2026-76151

An integer overflow vulnerability exists in the deflate dng load raw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

9.8CVSS6.5AI score
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/05/19 9:53 p.m.•62 views

LibRaw: LibRaw: Arbitrary code execution via a specially crafted malicious file

A flaw was found in LibRaw. A remote attacker could exploit an integer overflow vulnerability by providing a specially crafted malicious file. This flaw, located in the uncompressedfpdngloadraw functionality, leads to a heap buffer overflow. Successful exploitation may result in arbitrary code...

9.8CVSS6.7AI score0.00568EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2026/04/24 12:00 a.m.•17 views

SUSE SLED15 / SLES15 Security Update : libraw (SUSE-SU-2026:1555-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1555-1 advisory. - CVE-2026-5342: out-of-bounds read via LibRaw::nikonloadpaddedpackedraw bsc1261499. - CVE-2026-20884: integer...

9.8CVSS6.5AI score0.0098EPSS
SaveExploits7References22
OSV
OSV
•added 2026/04/22 4:24 p.m.•9 views

SUSE-SU-2026:1556-1 Security update for libraw

This update for libraw fixes the following issues: - CVE-2026-5342: out-of-bounds read via LibRaw::nikonloadpaddedpackedraw bsc1261499. - CVE-2026-20884: integer overflow and heap buffer overflow via deflatedngloadraw bsc1261671. - CVE-2026-20889: heap-based buffer overflow in...

9.8CVSS6.3AI score0.0098EPSS
SaveExploits6References13
OSV
OSV
•added 2026/04/07 3:17 p.m.•22 views

UBUNTU-CVE-2026-20884

An integer overflow vulnerability exists in the deflatedngloadraw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

9.8CVSS6.6AI score0.00568EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2026/04/07 12:00 a.m.•33 views

Libraw 安全漏洞

Libraw is a C++ library developed by Libraw Inc. that processes RAW CRW/CR2, NEF, RAF, DNG, and other formats images. It supports various operating systems. LibRaw has a security vulnerability, which stems from an integer overflow in the uncompressedfpdngloadraw function, potentially leading to a...

9.8CVSS6.4AI score0.00568EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/02/06 12:00 a.m.•4 views

PT-2021-28049

Name of the Vulnerable Software and Affected Versions LibRaw affected versions not specified Description The issue is related to a heap buffer overflow error. Technical details about the error include a crash type of Heap-buffer-overflow WRITE and a crash state involving the functions LibRaw buff...

6.2AI score
SaveExploits0References2
Rows per page
Query Builder