Lucene search
+L

93 matches found

OSV
OSV
added 2022/09/01 6:15 p.m.31 views

CVE-2020-35530

In LibRaw, there is an out-of-bounds write vulnerability within the "newnode" function libraw\src\x3f\x3futilspatched.cpp that can be triggered via a crafted X3F file...

5.5CVSS6.6AI score
Exploits0References3
OSV
OSV
added 2022/09/01 6:15 p.m.3 views

DEBIAN-CVE-2020-35530

In LibRaw, there is an out-of-bounds write vulnerability within the "newnode" function libraw\src\x3f\x3futilspatched.cpp that can be triggered via a crafted X3F file...

5.5CVSS5.4AI score0.00369EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2022/09/01 6:15 p.m.35 views

CVE-2020-35530

In LibRaw, there is an out-of-bounds write vulnerability within the "newnode" function libraw\src\x3f\x3futilspatched.cpp that can be triggered via a crafted X3F file...

5.5CVSS6.1AI score0.00369EPSS
Exploits1References4
Prion
Prion
added 2022/09/01 6:15 p.m.21 views

Out-of-bounds

In LibRaw, there is an out-of-bounds write vulnerability within the "newnode" function libraw\src\x3f\x3futilspatched.cpp that can be triggered via a crafted X3F file...

1.9CVSS5.4AI score0.00369EPSS
Exploits1References3Affected Software2
Cvelist
Cvelist
added 2022/09/01 5:52 p.m.27 views

CVE-2020-35530

In LibRaw, there is an out-of-bounds write vulnerability within the "newnode" function libraw\src\x3f\x3futilspatched.cpp that can be triggered via a crafted X3F file...

5.5AI score0.00369EPSS
Exploits1References3
CVE
CVE
added 2022/09/01 5:52 p.m.85 views

CVE-2020-35530

CVE-2020-35530 is a LibRaw vulnerability: an out-of-bounds write in the new_node() path (libraw/src/x3f_utils_patched.cpp) that can be triggered by a crafted X3F file. The issue is exploitable locally (AV:L, AC:L) with user interaction required, and the CVSS base score is 5.5 (Medium) with availa...

5.5CVSS5.4AI score0.00369EPSS
Exploits1References3Affected Software1
Debian CVE
Debian CVE
added 2022/09/01 5:52 p.m.36 views

CVE-2020-35530

In LibRaw, there is an out-of-bounds write vulnerability within the "newnode" function libraw\src\x3f\x3futilspatched.cpp that can be triggered via a crafted X3F file...

5.5CVSS5.5AI score0.00369EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2022/09/01 5:52 p.m.77 views

CVE-2020-35530

In LibRaw, there is an out-of-bounds write vulnerability within the "newnode" function libraw\src\x3f\x3futilspatched.cpp that can be triggered via a crafted X3F file...

5.5CVSS5.6AI score0.00369EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2022/09/01 12:0 a.m.5 views

PT-2022-6944 · Libraw +3 · Libraw +3

Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: The issue is related to an out-of-bounds read that can occur within the simple decode row function, specifically in the x3f utils patched.cpp component of the LibRaw image processing library...

7.8CVSS6.5AI score0.03672EPSS
Exploits6References64
NVD
NVD
added 2022/04/18 5:15 p.m.22 views

CVE-2021-3624

There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code may be executed in the victim's system...

9.3CVSS0.00876EPSS
Exploits1References1
OSV
OSV
added 2022/04/18 5:15 p.m.9 views

CVE-2021-3624

There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code may be executed in the victim's system...

7.8CVSS9.2AI score
Exploits0References1
OSV
OSV
added 2022/04/18 5:15 p.m.1 views

DEBIAN-CVE-2021-3624

There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code may be executed in the victim's system...

7.8CVSS8.2AI score0.00876EPSS
Exploits1References1
Prion
Prion
added 2022/04/18 5:15 p.m.19 views

Integer overflow

There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code may be executed in the victim's system...

9.3CVSS7.9AI score0.00876EPSS
Exploits1References1Affected Software2
UbuntuCve
UbuntuCve
added 2022/04/18 5:15 p.m.48 views

CVE-2021-3624

There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code may be executed in the victim's system...

9.3CVSS7.3AI score0.00876EPSS
Exploits1References1
Cvelist
Cvelist
added 2022/04/18 4:20 p.m.20 views

CVE-2021-3624

There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code may be executed in the victim's system...

8.2AI score0.00876EPSS
Exploits1References1
CVE
CVE
added 2022/04/18 4:20 p.m.130 views

CVE-2021-3624

The CVE-2021-3624 issue is confirmed in connected sources as an integer overflow in dcraw that allows arbitrary code execution when processing crafted X3F images. Amazon Linux 2 advisories ALAS2-2025-3017 and ALAS2-2025-3016 link this to dcraw (and LibRaw) and specify patched packages: dcraw 9.19...

9.3CVSS7.8AI score0.00876EPSS
Exploits1References1Affected Software1
Debian CVE
Debian CVE
added 2022/04/18 4:20 p.m.43 views

CVE-2021-3624

There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code may be executed in the victim's system...

9.3CVSS7.7AI score0.00876EPSS
Exploits1
Veracode
Veracode
added 2022/04/17 11:46 p.m.25 views

Denial Of Service (DoS)

dcraw:sid is vulnerable to denial of service.An integer overflow is possible when the victim runs dcraw with a maliciously crafted X3F input image, allowing arbitrary code to be executed in the victim's system...

7.8CVSS5.2AI score0.00876EPSS
Exploits1References2Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2021/05/04 12:0 a.m.36 views

Microsoft Windows Raw Image Extension X3F File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Raw Image Extension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

5.3CVSS5.8AI score
Exploits0
Positive Technologies
Positive Technologies
added 2020/09/01 12:0 a.m.11 views

PT-2020-6802 · Libraw +3 · Libraw +3

Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: The issue is related to an out-of-bounds write vulnerability within the new node function in the LibRaw library, which can be triggered via a crafted X3F file. This vulnerability may allow a...

7.8CVSS6.4AI score0.03672EPSS
Exploits6References67
Rows per page
Query Builder