PT-2022-36757 · Libraw · Libraw

Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: The issue is related to a heap buffer overflow error. Technical details about the error include a crash type of Heap-buffer-overflow WRITE and a crash state involving the LibRaw buffer...

libraw:libraw_raf_fuzzer: Heap-buffer-overflow in LibRaw_buffer_datastream::read

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=6213111850074112 Project: libraw Fuzzing Engine: afl Fuzz Target: librawraffuzzer Job Type: aflasanlibraw Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x621000004d00 Crash...

Ubuntu 18.04 LTS / 20.04 LTS : LibRaw vulnerabilities (USN-5715-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5715-1 advisory. It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted...

Ubuntu: Security Advisory (USN-5715-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5715-1: LibRaw vulnerabilities

It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, a remote attacker could cause applications linked against LibRaw to crash, resulting in a denial of service, or possibly execute arbitrary code...

USN-5715-1 libraw vulnerabilities

It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, a remote attacker could cause applications linked against LibRaw to crash, resulting in a denial of service, or possibly execute arbitrary code...

OSV-2022-1141 Heap-buffer-overflow in LibRaw::phase_one_correct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53039 Crash type: Heap-buffer-overflow READ 4 Crash state: LibRaw::phaseonecorrect LibRaw::raw2imageex LibRaw::dcrawprocess...

libraw:libraw_nef_fuzzer: Index-out-of-bounds in DHT::get_hv_rbg

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5798324217446400 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawneffuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

kimageformats:kimgio_raw_fuzzer: Heap-buffer-overflow in LibRaw::phase_one_correct

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4679840175620096 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgiorawfuzzer Job Type: libfuzzerasankimageformats Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

Out-of-Bounds Read

libRaw is vulnerable to out-of-bounds reads. The vulnerability is within the LibRaw::parseSonySRF function of sony.cpp when processing srf files causing an application crash...

Out-of-Bounds Read

libRaw is vulnerable to out-of-bounds reads. The vulnerability is within the simpledecoderow function of x3futilspatched.cpp which can be triggered via an image with a large rowstride field causing an application crash...

Out-of-Bounds Read

libRaw is vulnerable to out-of-bounds reads. The vulnerability is within the LibRaw::adobecopypixel function of dng.cpp when reading data from the image file causing an application crash...

Out-of-Bounds Read

libRaw is vulnerable to out-of-bounds reads. The vulnerability is within the newnode function of x3futilspatched.cpp which can be triggered via a crafted X3F file causing an application crash...

Out-of-Bounds Read

libRaw is vulnerable to out-of-bounds reads. The vulnerability is within the gethuffmandiff function of x3futilspatched.cpp when reading data from an image file causing an application crash...

OSV-2022-1122 Heap-buffer-overflow in LibRaw::phase_one_correct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52887 Crash type: Heap-buffer-overflow READ 4 Crash state: LibRaw::phaseonecorrect LibRaw::raw2imageex LibRaw::dcrawprocess...

PT-2022-36732 · Libraw · Libraw

Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the LibRaw::phase one correct, LibRaw::raw2image ex, and LibRaw::dcraw process functions...

libraw:libraw_fuzzer: Heap-buffer-overflow in LibRaw::raw2image

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=6170606026752000 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawfuzzer Job Type: libfuzzerasanlibraw Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x62c0000074...

kimageformats:kimgio_raw_fuzzer: Heap-buffer-overflow in LibRaw::phase_one_correct

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6609588074184704 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgiorawfuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

OSV-2022-1107 Heap-buffer-overflow in LibRaw::kodak_rgb_load_raw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52802 Crash type: Heap-buffer-overflow WRITE 2 Crash state: LibRaw::kodakrgbloadraw LibRaw::kodakthumbloader LibRaw::unpackthumb...

PT-2022-36718 · Libraw · Libraw

Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: The issue is related to a heap buffer overflow, which occurs when writing data. The crash is associated with the kodak rgb load raw, kodak thumb loader, and unpack thumb functions in LibRaw...