CVE-2020-35533

A vulnerability was found in LibRaw. An out-of-bounds read vulnerability exists within the "LibRaw::adobecopypixel" function libraw\src\decoders\dng.cpp when reading data from the image file...

CVE-2020-35532

A vulnerability was found in LibRaw. An out-of-bounds read vulnerability exists within the "simpledecoderow" function libraw\src\x3f\x3futilspatched.cpp, which can be triggered via an image with a large rowstride field...

CVE-2020-35531

A vulnerability was found in LibRaw. An out-of-bounds read vulnerability exists within the gethuffmandiff function libraw\src\x3f\x3futilspatched.cpp when reading data from an image file...

CVE-2020-35530

A vulnerability was found in LibRaw. An out-of-bounds write vulnerability within the "newnode" function libraw\src\x3f\x3futilspatched.cpp can be triggered via a crafted X3F file...

imagemagick:encoder_dng_fuzzer: Heap-buffer-overflow in LibRaw::nokia_load_raw

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6339314828574720 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

GLSA-202208-07 : LibRaw: Stack buffer overread

The remote host is affected by the vulnerability described in GLSA-202208-07 LibRaw: Stack buffer overread - Libraw before 0.20.1 has a stack buffer overflow via LibRaw::identifyprocessdngfields in identify.cpp. CVE-2020-24870 Note that Nessus has not tested for this issue but has instead relied...

LibRaw: Stack buffer overread

Background LibRaw is a library for reading RAW files obtained from digital photo cameras. Description LibRaw incorrectly handles parsing DNG fields in some cases, potentially resulting in a buffer overread leading to denial of service. Impact An attacker capable of providing crafted input to LibR...

imagemagick:crop_fuzzer: Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4872445298868224 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

imagemagick:crop_fuzzer: Index-out-of-bounds in LibRaw::parse_tiff_ifd

Detailed Report: https://oss-fuzz.com/testcase?key=4529829298438144 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: LibRaw::parsetiffifd LibRaw::parsetiff...

imagemagick:encoder_dng_fuzzer: Heap-buffer-overflow in LibRaw::nokia_load_raw

Detailed Report: https://oss-fuzz.com/testcase?key=5934575594897408 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderdngfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60b0000027de Crash State:...

imagemagick:encoder_dng_fuzzer: Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

Detailed Report: https://oss-fuzz.com/testcase?key=4998471031062528 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

imagemagick:crop_fuzzer: Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

Detailed Report: https://oss-fuzz.com/testcase?key=5301947783053312 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

imagemagick:crop_fuzzer: Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6006856901853184 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

imagemagick:encoder_dng_fuzzer: Heap-buffer-overflow in LibRaw::kodak_c330_load_raw

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6247513776062464 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

imagemagick:ping_dng_fuzzer: Index-out-of-bounds in LibRaw::parse_tiff_ifd

Detailed Report: https://oss-fuzz.com/testcase?key=6753328548151296 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingdngfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: LibRaw::parsetiffifd LibRaw::parsetiffif...

new packages: LibRaw

An update is available for LibRaw. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.0...

Mageia: Security Advisory (MGASA-2022-0160)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0160 Updated dcraw packages fix security vulnerability

A buffer over-read in cropmaskedpixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information. CVE-2018-19565 A heap buffer over-read in parsetiffifd in dcraw through 9.28 could be used by...

imagemagick:encoder_dng_fuzzer: Heap-buffer-overflow in LibRaw::nokia_load_raw

Detailed Report: https://oss-fuzz.com/testcase?key=5508514165948416 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60b00000133d Crash State:...

libraw:libraw_cr2_fuzzer: Use-of-uninitialized-value in LibRaw::phase_one_flat_field

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=4908113079173120 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...