1841 matches found
Linux Distros Unpatched Vulnerability : CVE-2018-5810
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An error within the rolleiloadraw function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.9 can be exploited to cause a heap-based buffer overflow an...
Linux Distros Unpatched Vulnerability : CVE-2018-20363
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibRaw::raw2image in librawcxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference. CVE-2018-20363 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2020-35534
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LibRaw, there is a memory corruption vulnerability within the crxFreeSubbandData function libraw\src\decoders\crx.cpp when processing cr3 files. CVE-2020-355...
Linux Distros Unpatched Vulnerability : CVE-2017-13735
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a floating point exception in the kodakradcloadraw function in dcrawcommon.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack...
Linux Distros Unpatched Vulnerability : CVE-2018-20364
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibRaw::copybayer in librawcxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference. CVE-2018-20364 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2018-5813
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An error within the parseminolta function dcraw/dcraw.c in LibRaw versions prior to 0.18.11 can be exploited to trigger an infinite loop via a specially crafted...
USN-7266-1 digikam vulnerabilities
Zinuo Han and Ao Wang discovered that the Android DNG SDK, vendored in digiKam, did not correctly parse certain files. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. CVE-2017-0691 It was...
CVE-2021-32142 affecting package LibRaw for versions less than 0.21.3-1
CVE-2021-32142 affecting package LibRaw for versions less than 0.21.3-1. An upgraded version of the package is available that resolves this issue...
Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.
...
OSV-2022-1292 Heap-buffer-overflow in LibRaw::phase_one_correct
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=394920636 Crash type: Heap-buffer-overflow READ 2 Crash state: LibRaw::phaseonecorrect LibRaw::raw2imageex LibRaw::dcrawprocess...
PT-2025-9876 · Libraw · Libraw
Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the LibRaw::phase one correct function, which is called by LibRaw::raw2image ex and LibRaw::dcraw process...
Debian dla-3113 : libraw-bin - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3113 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3113-1 [email protected]...
RHSA-2024:2137 Red Hat Security Advisory: LibRaw security update
Bulletin has no description...
RHSA-2024:2994 Red Hat Security Advisory: LibRaw security update
Bulletin has no description...
RHSA-2024:0343 Red Hat Security Advisory: LibRaw security update
Bulletin has no description...
RHSA-2023:6343 Red Hat Security Advisory: LibRaw security update
Bulletin has no description...
Advisory ROSA-SA-2024-2474
software: libraw 0.20.2 OS: ROSA-CHROME packageevrstring: libraw-0.20.2-4 CVE-ID: CVE-2020-22628 BDU-ID: 2023-05897 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the LibRaw::stretch function of the LibRaw image processing library is related to an operation exceeding buffer boundaries in memory...
OSV-2024-792 Index-out-of-bounds in AAHD::make_ahd_rb_hv
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42536934 Crash type: Index-out-of-bounds Crash state: AAHD::makeahdrbhv AAHD::makeahdrb LibRaw::aahdinterpolate...
LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp postprocessing/mem_image.cpp and utils/thumb_utils.cpp. For example malloc(sizeof(libraw_processed_image_t)+T.tlength) occurs without validating T.tlength.
...