The vulnerability of the libraw_cxx.cpp component in the LibRaw image processing library allows a intruder to trigger a service failure.

The vulnerability of the librawcxx.cpp component in the LibRaw image processing library is related to pointer dereferencing errors. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the internal/dcraw_common.cpp component in the LibRaw image processing library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the internal/dcrawcommon.cpp component in the LibRaw image processing library is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

LibRaw security update

0.20.2-6 - Fix CVE-2021-32142 Resolves: 2172140...

Huawei EulerOS: Security Advisory for LibRaw (EulerOS-SA-2023-3134)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

LibRaw: stack buffer overflow in LibRaw_buffer_datastream::gets() in src/libraw_datastream.cpp

A flaw was found in the LibRaw package. A stack buffer overflow in the LibRawbufferdatastream::gets function in src/librawdatastream.cpp caused by a maliciously crafted file may result in compromised confidentiality and integrity and an application crash...

Moderate: Red Hat Security Advisory: LibRaw security update

An update for LibRaw is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

ALSA-2023:6343 Moderate: LibRaw security update

LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. Security Fixes: LibRaw: stack buffer overflow in LibRawbufferdatastream::gets in src/librawdatastream.cpp CVE-2021-32142 For more details about the security issues, including the...

Moderate: LibRaw security update

LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. Security Fixes: LibRaw: stack buffer overflow in LibRawbufferdatastream::gets in src/librawdatastream.cpp CVE-2021-32142 For more details about the security issues, including the...

RHEL 9 : LibRaw (RHSA-2023:6343)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6343 advisory. LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. Security Fixes: LibRaw: stack buffe...

Slackware: Security Advisory (SSA:2023-295-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] LibRaw

New LibRaw packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/LibRaw-0.20.2-i586-4slack15.0.txz: Rebuilt. This update fixes security issues: A Buffer Overflow vulnerability was found in...

Slackware Linux 15.0 / current LibRaw Multiple Vulnerabilities (SSA:2023-295-01)

The version of LibRaw installed on the remote host is prior to 0.20.2 / 0.21.1. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-295-01 advisory. - Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the...

SUSE SLED12 / SLES12 Security Update : libraw (SUSE-SU-2023:3967-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3967-1 advisory. - CVE-2020-22628: Fixed buffer overflow vulnerability in LibRaw::stretch function in...

SUSE SLED15: libraw-devel / libraw-devel-static / libraw-tools / libraw20 / etc (SUSE-SU-2023:3968-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3968-1 advisory. - CVE-2020-22628: Fixed buffer overflow vulnerability in LibRaw::stretch function in...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libraw (SUSE-SU-2023:3966-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:3966-1 advisory. - CVE-2020-22628: Fixed buffer overflow vulnerability in LibRaw::stretch function in...

SUSE-SU-2023:3968-1 Security update for libraw

This update for libraw fixes the following issues: - CVE-2020-22628: Fixed buffer overflow vulnerability in LibRaw::stretch function in libraw\src\postprocessing\aspectratio.cpp. bsc1215308...

SUSE-SU-2023:3967-1 Security update for libraw

This update for libraw fixes the following issues: - CVE-2020-22628: Fixed buffer overflow vulnerability in LibRaw::stretch function in libraw\src\postprocessing\aspectratio.cpp. bsc1215308...

SUSE-SU-2023:3966-1 Security update for libraw

This update for libraw fixes the following issues: - CVE-2020-22628: Fixed buffer overflow vulnerability in LibRaw::stretch function in libraw\src\postprocessing\aspectratio.cpp. bsc1215308...

The vulnerability of the LibRaw::stretch() function in the LibRaw image processing library allows a attacker to cause a service failure.

The vulnerability of the LibRaw::stretch function in the image processing library LibRaw is related to the situation where the operation’s output goes beyond the buffer boundaries in memory when processing CRW files. Exploiting this vulnerability could allow a remote attacker to cause service...

Medium: LibRaw

Issue Overview: Buffer Overflow vulnerability in LibRaw::stretch function in libraw\src\postprocessing\aspectratio.cpp. CVE-2020-22628 In LibRaw, there is an out-of-bounds write vulnerability within the "newnode" function libraw\src\x3f\x3futilspatched.cpp that can be triggered via a crafted X3F...