Lucene search
+L

263 matches found

Positive Technologies
Positive Technologies
added 2020/03/25 12:00 a.m.8 views

PT-2020-6912 · Libraw +4 · Libraw +4

Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: The issue is related to a buffer overflow in the LibRaw::stretch function when processing CRW files, potentially allowing a remote attacker to cause a denial of service. The vulnerability is...

7.8CVSS6.8AI score0.01711EPSS
SaveExploits6References84
OSV
OSV
added 2019/07/15 1:25 p.m.8 views

USN-4056-1 exiv2 vulnerabilities

It was discovered that Exiv2 incorrectly handled certain PSD files. An attacker could possibly use this issue to cause a denial of service. CVE-2018-19107, CVE-2018-19108 It was discovered that Exiv2 incorrectly handled certain PNG files. An attacker could possibly use this issue to cause a denia...

6.5CVSS6.7AI score0.02132EPSS
SaveExploits5References8
CNVD
CNVD
added 2019/07/01 12:00 a.m.13 views

Exiv2 Input Validation Error Vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by Andreas Huggel programmers. The product provides the ability to read and write image metadata in a variety of formats including EXIF, IPTC and XMP. An input validation error vulnerability exists in Exiv2...

6.5CVSS8.4AI score0.02127EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2019/06/30 11:15 p.m.68 views

CVE-2019-13110

A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of service SIGSEGV via a crafted CRW image file...

6.5CVSS5.5AI score0.01925EPSS
SaveExploits1References9
OSV
OSV
added 2019/06/30 12:00 a.m.12 views

UBUNTU-CVE-2019-13110

A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of service SIGSEGV via a crafted CRW image file...

6.5CVSS6.8AI score0.01925EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2019/02/26 12:00 a.m.12 views

The vulnerability of the plugin for viewing RAW images in Microsoft Windows operating systems, related to improper code generation, allows a malicious actor to execute arbitrary code.

The vulnerability of the plugin for viewing RAW images in Microsoft Windows operating systems is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially crafted request...

7.8CVSS7.6AI score0.02361EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2018/12/19 12:00 a.m.12 views

LibRaw 'unpacked_load_raw()' Function Denial of Service Vulnerability

LibRaw is a C++ library for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. A denial of service vulnerability exists in the LibRaw 'unpackedloadraw' function. An attacker can exploit the vulnerability to cause a DoS Denial of Service...

7.5CVSS8.4AI score0.02505EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/12/10 12:00 a.m.11 views

LibRaw 'nikon_coolscan_load_raw()' function memory out-of-bounds read vulnerability

LibRaw is a C++ library developed by the LibRaw team for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. A security vulnerability exists in the 'nikoncoolscanloadraw' function in the internal/dcrawcommon.cpp file in LibRaw versions prior to 0.18.9. A remote attacker can exploit th...

6.5CVSS9.2AI score0.01796EPSS
SaveExploits0References1
OSV
OSV
added 2018/11/29 5:29 a.m.7 views

DEBIAN-CVE-2018-19655

A stack-based buffer overflow in the findgreen function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file...

8.8CVSS7.6AI score0.02855EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/11/29 12:00 a.m.18 views

dcraw Buffer Overflow Vulnerability

dcraw is a U.S. software developer David J. Coffin developed a set of open source for the camera to shoot the RAW film into PPM or TIFF format picture tool . A buffer overflow vulnerability exists in the 'findgreen' function in dcraw version 9.28 and earlier used in ufraw-batch and other devices....

8.8CVSS8.6AI score0.02855EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2018/07/31 5:49 p.m.41 views

CVE-2018-5810

A heap-based buffer overflow has been discovered in LibRaw, in the way rolleiloadraw function in internal/dcrawcommon.cpp file handles the input image. An attacker could trigger the flaw by providing a specially crafted Rollei RAW Image, which could result in a crash or other unspecified effects...

8.8CVSS2.9AI score0.021EPSS
SaveExploits0References2
Fedora
Fedora
added 2018/06/28 2:10 p.m.37 views

[SECURITY] Fedora 28 Update: dcraw-9.28.0-1.fc28

This package contains dcraw, a command line tool to decode raw image data downloaded from digital cameras...

6.5CVSS2.4AI score0.02039EPSS
SaveExploits1
Fedora
Fedora
added 2017/09/30 7:30 a.m.40 views

[SECURITY] Fedora 27 Update: rawtherapee-5.2-2.fc27

Rawtherapee is a RAW image processing software. It gives full control over many parameters to enhance the raw picture before finally exporting it to some common image format...

7.5CVSS3AI score0.02964EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2017/09/22 8:49 a.m.37 views

CVE-2017-14265

A stack buffer overflow flaw was found in the way dcraw handled processing of RAW image files. This flaw could potentially be used to crash the dcraw process by supplying it a specially crafted image file...

9.8CVSS2.2AI score0.04336EPSS
SaveExploits0References1
Fedora
Fedora
added 2017/09/19 11:24 p.m.42 views

[SECURITY] Fedora 26 Update: rawtherapee-5.2-2.fc26

Rawtherapee is a RAW image processing software. It gives full control over many parameters to enhance the raw picture before finally exporting it to some common image format...

7.5CVSS3AI score0.02964EPSS
SaveExploits0
NVD
NVD
added 2017/08/29 6:29 a.m.21 views

CVE-2017-13735

There is a floating point exception in the kodakradcloadraw function in dcrawcommon.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack...

7.5CVSS7.3AI score0.02964EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2016/12/22 12:00 a.m.37 views

The vulnerability of the Raw-image converter to DNG format allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of the Raw-image conversion to DNG format in DNG Converter arises from the occurrence of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure due to a memory corruption...

10CVSS8.5AI score0.0418EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2016/10/13 12:00 a.m.16 views

DSA-3692-1 freeimage - security update

Bulletin has no description...

7.8CVSS7.8AI score0.0544EPSS
SaveExploits1
Fedora
Fedora
added 2015/07/18 2:03 a.m.47 views

[SECURITY] Fedora 22 Update: rawstudio-2.1-0.1.20150511git983bda1.fc22

Rawstudio is a highly specialized application for processing RAW images from digital cameras. It is not a fully featured image editing application. The RAW format is often recommended to get the best quality out of digital camera images. The format is specific to cameras and cannot be read by mos...

5.5CVSS1.1AI score0.0544EPSS
SaveExploits0
Fedora
Fedora
added 2015/06/06 12:13 a.m.22 views

[SECURITY] Fedora 22 Update: dcraw-9.25.0-2.fc22

This package contains dcraw, a command line tool to decode raw image data downloaded from digital cameras...

4.3CVSS2.4AI score0.0544EPSS
SaveExploits0
Rows per page
Query Builder