SUSE CVE-2017-6889

An integer overflow error within the "foveonloadcamf" function dcrawfoveon.c in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a heap-based buffer overflow...

The vulnerability of the foveon_load_camf() function in the raw converter dcraw allows a hacker to execute arbitrary code.

The vulnerability of the foveonloadcamf function in the raw converter dcraw exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...