PT-2026-98299

Name of the Vulnerable Software and Affected Versions LibRaw version 0.22.0 Description An incorrect numeric conversion occurs in the parse tiff ifd function when processing the TIFF tag 0x00fe NewSubfileType. A specially crafted RAW, TIFF, or DNG file can provide a NewSubfileType value that...

SUSE CVE-2017-6887

A boundary error within the "parsetiffifd" function internal/dcrawcommon.cpp in LibRaw versions before 0.18.2 can be exploited to cause a memory corruption via e.g. a specially crafted KDC file with model set to "DSLR-A100" and containing multiple sequences of 0x100 and 0x14A TAGs...

PT-2022-36690

Name of the Vulnerable Software and Affected Versions LibRaw affected versions not specified Description The issue is related to a crash in LibRaw, specifically in the LibRaw::sget4 function, which is called by LibRaw::parseAdobeRAFMakernote and LibRaw::parse tiff ifd. The crash type is reported ...

LibRaw Null Pointer Dereference Vulnerability

libraw is a C++ library for processing RAWCRW/CR2,NEF,RAF,DNG,andothers format images, supporting various operating systems. A code issue vulnerability exists in LibRaw version 20.0, which originates from a null pointer dereference cpp in parsetiffifd of src/metadata/tiff, which can be exploited ...

dcraw floating point exception vulnerability (CNVD-2019-00790)

dcraw is a U.S. software developer David J. Coffin developed a set of open source for the camera to shoot the RAW film into PPM or TIFF format picture tool . A floating-point exception vulnerability exists in parsetiffifd in dcraw 9.28 and earlier versions, which can be exploited to cause an...

Code injection

A floating point exception in parsetiffifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code...

UBUNTU-CVE-2018-19567

A floating point exception in parsetiffifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code...

PT-2018-15010

Name of the Vulnerable Software and Affected Versions dcraw versions through 9.28 Description A heap buffer over-read issue exists in the parse tiff ifd function of dcraw, which could allow attackers to crash an application that uses the dcraw code or leak private information by supplying malicio...

PT-2018-15011

Name of the Vulnerable Software and Affected Versions dcraw versions through 9.28 Description A floating point exception in the parse tiff ifd function could be used by attackers to crash an application that bundles the dcraw code by supplying malicious files. Recommendations For dcraw versions...

DEBIAN-CVE-2017-6887

A boundary error within the "parsetiffifd" function internal/dcrawcommon.cpp in LibRaw versions before 0.18.2 can be exploited to cause a memory corruption via e.g. a specially crafted KDC file with model set to "DSLR-A100" and containing multiple sequences of 0x100 and 0x14A TAGs...

UBUNTU-CVE-2017-6886

An error within the "parsetiffifd" function internal/dcrawcommon.cpp in LibRaw versions before 0.18.2 can be exploited to corrupt memory...

UBUNTU-CVE-2017-6887

A boundary error within the "parsetiffifd" function internal/dcrawcommon.cpp in LibRaw versions before 0.18.2 can be exploited to cause a memory corruption via e.g. a specially crafted KDC file with model set to "DSLR-A100" and containing multiple sequences of 0x100 and 0x14A TAGs...

PT-2017-17396

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.2 Description A boundary error within the parse tiff ifd function can be exploited to cause memory corruption via a specially crafted file, such as a KDC file with the model set to "DSLR-A100" and containing...

PT-2017-17395

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.2 Description The issue is related to an error within the parse tiff ifd function, located in internal/dcraw common.cpp, which can be exploited to corrupt memory. Recommendations For versions prior to 0.18.2, upda...