EUVD-2018-11257

Malware in sbrugna...

LibRaw 'kodak_radc_load_raw' function out-of-bounds read vulnerability

LibRaw is a C++ library for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. An out-of-bounds read vulnerability exists in the 'kodakradcloadraw' function internal/dcrawcommon.cpp file in LibRaw versions prior to 0.18.7. An attacker can exploit this vulnerability with a specially...

imagemagick/encoder_dng_fuzzer: Stack-buffer-overflow in LibRaw::kodak_radc_load_raw

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5965403386806272 Project: imagemagick Fuzzer: aflimagemagickencoderdngfuzzer Fuzz target binary: encoderdngfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

PT-2018-3833

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.7 Description The issue is related to an error in the kodak radc load raw function, specifically with the buf variable, which can cause an out-of-bounds read memory access, leading to a crash. This can be exploite...

PT-2017-4220

Name of the Vulnerable Software and Affected Versions LibRaw version 0.18.2 Description The issue is related to insufficient input validation in the kodak radc load raw function of the dcraw common.cpp component in the LibRaw image processing library. This can be exploited by a remote attacker...