EUVD-2018-13798

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2018-25017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RawSpeed aka librawspeed 3.1 has a heap-based buffer overflow in TableLookUp::setTable. CVE-2018-25017 Note that Nessus relies on the presence of the package as...

CVE-2018-25017

RawSpeed aka librawspeed 3.1 has a heap-based buffer overflow in TableLookUp::setTable...

PT-2023-35668 · Rawspeed · Rawspeed

Name of the Vulnerable Software and Affected Versions: rawspeed affected versions not specified Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the parseWhiteBalance function within DngDecoder, which is part of the rawspeed library...

OSV-2023-756 Heap-buffer-overflow in rawspeed::DngDecoder::decodeMetaDataInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61800 Crash type: Heap-buffer-overflow READ 4 Crash state: rawspeed::DngDecoder::decodeMetaDataInternal rawspeed::RawDecoder::decodeMetaData...

PT-2023-35982 · Rawspeed · Rawspeed

Name of the Vulnerable Software and Affected Versions: rawspeed affected versions not specified Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash indicate it occurs in the rawspeed::DngDecoder::decodeMetaDataInternal and...

OSV-2022-1199 Use-of-uninitialized-value in rawspeed::RawImageData::checkRowIsInitialized

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53618 Crash type: Use-of-uninitialized-value Crash state: rawspeed::RawImageData::checkRowIsInitialized rawspeed::RawImageData::checkMemIsInitialized rawspeed::RawDecoder::decodeRaw...

PT-2022-36783 · Rawspeed · Rawspeed

Name of the Vulnerable Software and Affected Versions: rawspeed affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the checkRowIsInitialized and checkMemIsInitialized functions of the RawImageData class,...

PT-2022-36734 · Rawspeed · Rawspeed

Name of the Vulnerable Software and Affected Versions: rawspeed affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the applyOP function of DngOpcodes::PixelOpcode when handling metadata in DngDecoder. Technical details include t...

The vulnerability of the TableLookUp::setTable function in the RawSpeed library of the Darktable application allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the TableLookUp::setTable function in the RawSpeed library of the Darktable application relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

RawSpeed Buffer Overflow Vulnerability

RawSpeed is a full-line solution for Internet users to upload and download large files. A buffer overflow vulnerability exists in RawSpeed, which stems from an out-of-bounds read/write operation occurring due to a failure to validate memory boundaries during a call to the TableLookUp::setTable...

CVE-2018-25017

RawSpeed aka librawspeed 3.1 has a heap-based buffer overflow in TableLookUp::setTable...

CVE-2018-25017

RawSpeed aka librawspeed 3.1 has a heap-based buffer overflow in TableLookUp::setTable...

DEBIAN-CVE-2018-25017

RawSpeed aka librawspeed 3.1 has a heap-based buffer overflow in TableLookUp::setTable...

Heap overflow

RawSpeed aka librawspeed 3.1 has a heap-based buffer overflow in TableLookUp::setTable...

CVE-2018-25017

RawSpeed aka librawspeed 3.1 has a heap-based buffer overflow in TableLookUp::setTable...

UBUNTU-CVE-2018-25017

RawSpeed aka librawspeed 3.1 has a heap-based buffer overflow in TableLookUp::setTable...

CVE-2018-25017

RawSpeed (aka librawspeed) 3.1 contains a heap-based buffer overflow in TableLookUp::setTable. The CVE-2018-25017 entry applies to this library and is corroborated across multiple sources in connected documents (e.g., Debian, Ubuntu, Red Hat, OSV, CNVD, etc.). Documented impact indicates high sev...

CVE-2018-25017

RawSpeed aka librawspeed 3.1 has a heap-based buffer overflow in TableLookUp::setTable...

CVE-2018-25017

RawSpeed aka librawspeed 3.1 has a heap-based buffer overflow in TableLookUp::setTable...