SUSE CVE-2018-10529

An issue was discovered in LibRaw 0.18.9. There is an out-of-bounds read affecting the X3F property table list implementation in librawx3f.cpp and librawcxx.cpp...

SUSE CVE-2018-10528

An issue was discovered in LibRaw 0.18.9. There is a stack-based buffer overflow in the utf2char function in librawcxx.cpp...

CVE-2018-20364

CVE-2018-20364 affects LibRaw 0.19.1 where LibRaw::copy_bayer in libraw_cxx.cpp has a NULL pointer dereference. Public documents corroborate the issue and link it to LibRaw 0.19.1; no explicit impact vector or patch version is provided beyond noting the NULL dereference. Other connected sources r...

CVE-2018-20363

CVE-2018-20363 affects LibRaw 0.19.1 with a NULL pointer dereference in LibRaw::raw2image (libraw_cxx.cpp). The connected advisories show patches (e.g., openSUSE openSUSE-2019-94, Ubuntu USN-3989-1) addressing LibRaw vulnerabilities including CVE-2018-20363; other fixes cover CVE-2018-20364 and C...

CVE-2018-20365

LibRaw::raw2image in librawcxx.cpp has a heap-based buffer overflow...

LibRaw Stack Buffer Overflow Vulnerability

LibRaw is a C++ library developed by the LibRaw team for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. A stack buffer overflow vulnerability exists in the 'utf2char' function of the librawcxx.cpp file in LibRaw version 0.18.9. An attacker can exploit this vulnerability to cause ...

DEBIAN-CVE-2018-10528

An issue was discovered in LibRaw 0.18.9. There is a stack-based buffer overflow in the utf2char function in librawcxx.cpp...

CVE-2018-10528

An issue was discovered in LibRaw 0.18.9. There is a stack-based buffer overflow in the utf2char function in librawcxx.cpp...

UBUNTU-CVE-2018-10528

An issue was discovered in LibRaw 0.18.9. There is a stack-based buffer overflow in the utf2char function in librawcxx.cpp...

UBUNTU-CVE-2013-2126

Multiple double free vulnerabilities in the LibRaw::unpack function in librawcxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service application crash and possibly execute arbitrary code via a malformed full-color 1 Foveon or 2 sRAW image file...