LibRaw Buffer Overflow Vulnerability (CNVD-2020-59710)

LibRaw is a C++ library from the LibRaw team for processing RAW CRW/CR2, NEF, RAF, DNG, andothers format images. A buffer overflow vulnerability exists in LibRaw versions prior to 20.0. The vulnerability originates from LibRaw:: GetNormalizedModel in src/metadata/normalizemodel.cpp. An attacker c...