2346 matches found
CVE-2018-5807
An error within the "samsungloadraw" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.9 can be exploited to cause an out-of-bounds read memory access and subsequently cause a crash...
CVE-2018-5800
An off-by-one error within the "LibRaw::kodakycbcrloadraw" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.7 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash...
CVE-2018-5804
LibRaw contains a type confusion vulnerability in the identify() function (internal/dcraw_common.cpp) that affects versions prior to 0.18.8. The issue can be exploited to trigger a division by zero, potentially causing a crash or denial of service. Affected software is LibRaw before the 0.18.8 pa...
CVE-2018-5816
CVE-2018-5816 is an integer overflow in LibRaw’s identify() (internal/dcraw_common.cpp) that can lead to division by zero via specially crafted NOKIARAW files; it is linked to an incomplete fix of CVE-2018-5804. The connected documents indicate LibRaw before 0.18.12 is affected, with remediation ...
CVE-2018-5812
CVE-2018-5812: In LibRaw, an error in nikon_coolscan_load_raw() (internal/dcraw_common.cpp) of LibRaw versions prior to 0.18.9 allows a NULL pointer dereference, potentially crashing the application. Affected is LibRaw pre-0.18.9 (details replicated across CVE lists and Debian/OSV entries). Mitig...
CVE-2018-5805
A boundary error within the "quicktake100loadraw" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.8 can be exploited to cause a stack-based buffer overflow and subsequently cause a crash...
CVE-2018-5804
A type confusion error within the "identify" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.8 can be exploited to trigger a division by zero...
CVE-2017-16910
An error within the "LibRaw::xtransinterpolate" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read memory access and subsequently a Denial of Service condition...
CVE-2018-5805
LibRaw 0.x is affected by CVE-2018-5805 due to a boundary/stack-based overflow in quicktake_100_load_raw() (internal/dcraw_common.cpp) prior to 0.18.8. The vulnerability can cause a crash. Public advisories reference affected packages (LibRaw in various Red Hat/MiracleLinux/openSUSE updates). Rem...
CVE-2018-5805
A boundary error within the "quicktake100loadraw" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.8 can be exploited to cause a stack-based buffer overflow and subsequently cause a crash...
CVE-2018-5811
CVE-2018-5811 affects LibRaw before 0.18.9, where the function nikon_coolscan_load_raw() in internal/dcraw_common.cpp can be exploited to cause an out-of-bounds memory read and crash. Concordant sources (Debian DLA-2903/OSV/NVD) describe this as part of a broader LibRaw set of vulnerabilities and...
CVE-2017-16910
CVE-2017-16910 is associated with LibRaw prior to 0.18.6, where the LibRaw::xtrans_interpolate() function in internal/dcraw_common.cpp can be exploited to cause an invalid read memory access and a Denial of Service. The connected documents confirm this CVE as part of LibRaw exposure and list rela...
CVE-2017-16910
An error within the "LibRaw::xtransinterpolate" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read memory access and subsequently a Denial of Service condition...
CVE-2018-5809
An error within the "LibRaw::parseexif" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.9 can be exploited to cause a stack-based buffer overflow and subsequently execute arbitrary code...
CVE-2018-5809
An error within the "LibRaw::parseexif" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.9 can be exploited to cause a stack-based buffer overflow and subsequently execute arbitrary code...
CVE-2018-5806
CVE-2018-5806 affects LibRaw (dcraw code) prior to 0.18.8, causing a NULL pointer dereference in leaf_hdr_load_raw() within internal/dcraw_common.cpp. Affected projects reference LibRaw/dcraw as the root cause; advisories indicate upgrading to LibRaw 0.18.8+ to remediate. Other related CVEs (e.g....
CVE-2018-5809
LibRaw
CVE-2018-5810
An error within the "rolleiloadraw" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.9 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash...
CVE-2018-5815
CVE-2018-5815 affects LibRaw up to version 0.18.11 in the parse_qt() function (internal/dcraw_common.cpp). A specially crafted Apple QuickTime file can trigger an integer overflow that leads to an infinite loop, i.e., potential denial of service. Public details in connected documents confirm the ...