11 matches found
freeimage/load_from_memory_fuzzer: Stack-buffer-overflow in LibRaw::parse_rollei
Detailed report: https://oss-fuzz.com/testcase?key=5156329342107648 Project: freeimage Fuzzer: libFuzzerloadfrommemoryfuzzer Fuzz target binary: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7fef5bbbdca0 Crash Stat...
CVE-2018-5818
An error within the "parserollei" function internal/dcrawcommon.cpp within LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop...
Code injection
An error within the "parserollei" function internal/dcrawcommon.cpp within LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop...
CVE-2018-5818
The CVE-2018-5818 entry concerns LibRaw prior to 0.19.1, where an error in parse_rollei() (internal/dcraw_common.cpp) can be exploited to trigger an infinite loop (potential DoS). Affected component: LibRaw (image demosaic/decoding code). Root cause: faulty handling in parse_rollei() leading to u...
CVE-2018-5818
An error within the "parserollei" function internal/dcrawcommon.cpp within LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop...
CVE-2018-5818
An error within the "parserollei" function internal/dcrawcommon.cpp within LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop...
CVE-2018-5818: Loop with Unreachable Exit Condition
An error within the "parserollei" function internal/dcrawcommon.cpp within LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop...
CVE-2018-5818
An error within the "parserollei" function internal/dcrawcommon.cpp within LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop...
UBUNTU-CVE-2018-5818
An error within the "parserollei" function internal/dcrawcommon.cpp within LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop...
Denial Of Service (DoS)
libraw.so is vulnerable to denial of service. A flaw in the parserollei function in internal/dcrawcommon.cpp allows a remote attacker to cause the application to enter into an infinite loop, resulting in a denial of service condition...
