LibRaw security update

CentOS Errata and Security Advisory CESA-2024:0343 An update for LibRaw is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CentOS 7 : LibRaw (RHSA-2024:0343)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0343 advisory. - Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::getschar, int in...

RHEL 7 : LibRaw (RHSA-2024:0343)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0343 advisory. LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. Security Fixes: LibRaw: stack buffe...

LibRaw: stack buffer overflow in LibRaw_buffer_datastream::gets() in src/libraw_datastream.cpp

A flaw was found in the LibRaw package. A stack buffer overflow in the LibRawbufferdatastream::gets function in src/librawdatastream.cpp caused by a maliciously crafted file may result in compromised confidentiality and integrity and an application crash...

Moderate: Red Hat Security Advisory: LibRaw security update

An update for LibRaw is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

LibRaw security update

0.19.4-2 - Fix CVE-2021-32142 - Resolves: RHEL-9524...

Oracle Linux 7 : LibRaw (ELSA-2024-0343)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-0343 advisory. - Fix CVE-2021-32142 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

EulerOS 2.0 SP8 : LibRaw (EulerOS-SA-2023-3134)

According to the versions of the LibRaw package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in LibRaw. A heap-buffer-overflow in raw2imageex caused by a maliciously crafted file may lead to an application crash...

Buffer Overflow

LibRaw is vulnerable to Buffer Overflow. The vulnerability is due to improper size checks of the len variable in the jpegstart function within dcraw. This issue can be exploited by an attacker via a maliciously crafted raw image resulting in Denial of Service...

LibRaw: Heap Buffer Overflow

Background LibRaw is a library for reading RAW files obtained from digital photo cameras. Description A vulnerability has been discovered in LibRaw. Please review the CVE identifier referenced below for details. Impact A heap-buffer-overflow in raw2imageex caused by a maliciously crafted file may...

GLSA-202312-08 : LibRaw: Heap Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-202312-08 LibRaw: Heap Buffer Overflow - A flaw was found in LibRaw. A heap-buffer-overflow in raw2imageex caused by a maliciously crafted file may lead to an application crash. CVE-2023-1729 Note that Nessus has not tested for th...

OSV-2023-1295 Global-buffer-overflow in libraw_tagtype_dataunit_bytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65027 Crash type: Global-buffer-overflow READ 4 Crash state: librawtagtypedataunitbytes checkedbuffert::tiffsget LibRaw::parseSonySR2...

PT-2023-35637 · Libraw · Libraw

Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: The issue is related to a global buffer overflow read error. Technical details about the crash include the libraw tagtype dataunit bytes function, checked buffer t::tiff sget function, and...

Oracle Linux 9 : LibRaw (ELSA-2023-6343)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6343 advisory. 0.20.2-6 - Fix CVE-2021-32142 Resolves: 2172140 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...

The vulnerability of the internal/dcraw_common.cpp component in the LibRaw image processing library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the internal/dcrawcommon.cpp component in the LibRaw image processing library is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the xtrans_interpolate function in the internal/dcraw_common.cpp component of the LibRaw image processing library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the xtransinterpolate function in the internal/dcrawcommon.cpp component of the LibRaw image processing library is related to the output of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to gain access to...

The vulnerability of components such as dcraw/dcraw.c and internal/dcraw_common.cpp, which are part of the LibRaw image processing library, allows a perpetrator to gain access to confidential data and also trigger a service failure.

The vulnerability of the components dcraw/dcraw.c and internal/dcrawcommon.cpp, which are part of the LibRaw image processing library, involves reading data beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause servic...

The vulnerability of the internal/dcraw_common.cpp component in the LibRaw image processing library allows a hacker to trigger a service failure.

The vulnerability of the internal/dcrawcommon.cpp component in the LibRaw image processing library is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...

The vulnerability of the LibRaw::raw2image() function in the libraw_cxx.cpp component of the LibRaw image processing library allows a attacker to cause a service failure.

The vulnerability of the LibRaw::raw2image function in the librawcxx.cpp component of the LibRaw image processing library is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the processCanonCameraInfo function in the LibRaw image processing library allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the processCanonCameraInfo function in the LibRaw image processing library is related to the output of operations that go beyond buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity,...