An integer overflow error within the “identify()” function
(internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.12 can be
exploited to trigger a division by zero via specially crafted NOKIARAW file
(Note: This vulnerability is caused due to an incomplete fix of
CVE-2018-5804).
Author | Note |
---|---|
alexmurray | Issue caused by an incomplete fix for CVE-2018-5804 |
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 18.04 | noarch | darktable | < any | UNKNOWN |
ubuntu | 20.04 | noarch | darktable | < any | UNKNOWN |
ubuntu | 22.04 | noarch | darktable | < any | UNKNOWN |
ubuntu | 23.10 | noarch | darktable | < any | UNKNOWN |
ubuntu | 24.04 | noarch | darktable | < any | UNKNOWN |
ubuntu | 16.04 | noarch | darktable | < any | UNKNOWN |
ubuntu | 18.04 | noarch | dcraw | < any | UNKNOWN |
ubuntu | 20.04 | noarch | dcraw | < any | UNKNOWN |
ubuntu | 22.04 | noarch | dcraw | < any | UNKNOWN |
ubuntu | 23.10 | noarch | dcraw | < any | UNKNOWN |