libraw:libraw_fuzzer: Use-of-uninitialized-value in LibRaw::getwords

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=4788296361574400 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawfuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

Mageia: Security Advisory (MGASA-2023-0082)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::getbithuff

Detailed Report: https://oss-fuzz.com/testcase?key=5840788558053376 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::getbithuff...

libraw:libraw_fuzzer: Index-out-of-bounds in AAHD::make_ahd_rb_hv

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=4975650594488320 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawfuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

libraw:libraw_raf_fuzzer: Use-of-uninitialized-value in LibRaw::processCanonCameraInfo

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=6415431006289920 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawraffuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

OSV-2023-184 UNKNOWN READ in LibRaw::sget4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57105 Crash type: UNKNOWN READ Crash state: LibRaw::sget4 LibRaw::parseAdobeRAFMakernote LibRaw::parsetiffifd...

Fedora: Security Advisory for mingw-LibRaw (FEDORA-2023-220878f1bf)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for mingw-LibRaw (FEDORA-2023-be842ba7fb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-35704 · Libraw · Libraw

Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: The issue is related to a crash in LibRaw, specifically in the LibRaw::sget4 function, which is called by LibRaw::parseAdobeRAFMakernote and LibRaw::parse tiff ifd. The crash type is reporte...

[SECURITY] Fedora 37 Update: mingw-LibRaw-0.20.2-8.fc37

MinGW Windows LibRaw library...

[SECURITY] Fedora 36 Update: mingw-LibRaw-0.20.2-8.fc36

MinGW Windows LibRaw library...

libraw:libraw_nef_fuzzer: Crash in LibRaw::sget4

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=4516421182029824 Project: libraw Fuzzing Engine: honggfuzz Fuzz Target: librawneffuzzer Job Type: honggfuzzasanlibraw Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f1343c777fd Crash...

Fedora 36 : mingw-LibRaw (2023-220878f1bf)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-220878f1bf advisory. Backport fix for CVE-2021-32142 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 37 : mingw-LibRaw (2023-be842ba7fb)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-be842ba7fb advisory. Backport fix for CVE-2021-32142 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

imagemagick:rotate_fuzzer: Use-of-uninitialized-value in LibRaw::adjust_bl

Detailed Report: https://oss-fuzz.com/testcase?key=5553288251834368 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: rotatefuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::adjustbl LibRaw::raw2imagee...

Debian: Security Advisory (DLA-243-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the LibRaw::adobe_copy_pixel() function in the LibRaw image processing library allows a attacker to trigger a service failure.

The vulnerability of the LibRaw::adobecopypixel function in the LibRaw image processing library is related to the situation where the operation’s output goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a attacker to trigger a service denial using a specially...

Updated libraw packages fix security vulnerability

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::getschar, int in /src/libraw/src/librawdatastream.cpp. CVE-2021-32142...

MGASA-2023-0082 Updated libraw packages fix security vulnerability

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::getschar, int in /src/libraw/src/librawdatastream.cpp. CVE-2021-32142...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libraw (SUSE-SU-2023:0511-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0511-1 advisory. - CVE-2021-32142: Fixed buffer overflow in the LibRawbufferdatastream:gets function bsc1208470. Tenable h...