CVE-2017-6889

LibRaw-demosaic-pack-GPL2 is affected by CVE-2017-6889 due to an integer/heap overflow in foveon_load_camf() in dcraw_foveon.c, prior to version 0.18.2. The issue is described as a heap-based buffer overflow, with referenced advisories noting potential denial of service. A fix exists in LibRaw 0....

CVE-2017-6890

CVE-2017-6890 affects LibRaw-demosaic-pack-GPL2 before 0.18.2. The issue is a boundary error in foveon_load_camf() (dcraw_foveon.c) when initializing a Huffman table, which can cause a stack-based buffer overflow. Connected sources confirm fixes in OpenSUSE/SUSE advisories (e.g., openSUSE-2017-64...