Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 68

Export CSV
CVE-2018-5819

LibRaw: DoS in parse_sinar_ia function in internal/dcraw_common.cpp

An error within the "parse_sinar_ia()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to exhaust available CPU resources.

CVSS 3.0 · 7.5 High EPSS 2.9% KEV · Not listed
Vendors
Debian Libraw Redhat
Products
Debian Linux Libraw Ansible Tower and 1 more
CVE-2018-5818

LibRaw: DoS in parse_rollei function in internal/dcraw_common.cpp

An error within the "parse_rollei()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop.

CVSS 3.0 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Debian Libraw Redhat
Products
Debian Linux Libraw Ansible Tower and 1 more
CVE-2018-5817

LibRaw: DoS in unpacked_load_raw function in internal/dcraw_common.cpp

A type confusion error within the "unpacked_load_raw()" function within LibRaw versions prior to 0.19.1 (internal/dcraw_common.cpp) can be exploited to trigger an infinite loop.

CVSS 3.0 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Debian Libraw
Products
Debian Linux Libraw
CVE-2018-5816

LibRaw: Integer overflow in internal/dcraw_common.cpp:identify() allows for denial of service

An integer overflow error within the "identify()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.12 can be exploited to trigger a division by zero via specially crafted NOKIARAW file (Note: This vulnerability is caused due to an incomplete fix of CVE-2018-5804).

CVSS 3.0 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Libraw
Products
Ubuntu Linux Libraw
CVE-2018-5815

LibRaw: Integer overflow in internal/dcraw_common.cpp:parse_qt() allows for denial of service

An integer overflow error within the "parse_qt()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.12 can be exploited to trigger an infinite loop via a specially crafted Apple QuickTime file.

CVSS 3.0 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Canonical Libraw
Products
Ubuntu Linux Libraw
CVE-2018-5813

libRaw: infinite loop in the parse_minolta function in dcraw/dcraw.c

An error within the "parse_minolta()" function (dcraw/dcraw.c) in LibRaw versions prior to 0.18.11 can be exploited to trigger an infinite loop via a specially crafted file.

CVSS 3.1 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Libraw
Products
Ubuntu Linux Libraw
CVE-2018-5812

libRaw: NULL pointer dereference in nikon_coolscan_load_raw in internal/dcraw_common.cpp

An error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to trigger a NULL pointer dereference.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Canonical Libraw
Products
Ubuntu Linux Libraw
CVE-2018-5811

LibRaw: out-of-bounds read in nikon_coolscan_load_raw in internal/dcraw_common.cpp

An error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause an out-of-bounds read memory access and subsequently cause a crash.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Canonical Libraw
Products
Ubuntu Linux Libraw
CVE-2018-5810

libRaw: heap-based buffer overflow in rollei_load_raw in internal/dcraw_common.cpp

An error within the "rollei_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash.

CVSS 3.0 · 8.8 High EPSS 2.1% KEV · Not listed
Vendors
Canonical Libraw
Products
Ubuntu Linux Libraw
CVE-2018-5809

LibRaw: stack-based buffer overflow in LibRaw::parse_exif() and subsequently execute arbitrary code

An error within the "LibRaw::parse_exif()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause a stack-based buffer overflow and subsequently execute arbitrary code.

CVSS 3.0 · 8.8 High EPSS 2.8% KEV · Not listed
Vendors
Libraw
Products
Libraw
CVE-2018-5808

LibRaw: stack-based buffer overflow in find_green() leads to arbitrary code execution

An error within the "find_green()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause a stack-based buffer overflow and subsequently execute arbitrary code.

CVSS 3.0 · 8.8 High EPSS 2.8% KEV · Not listed
Vendors
Debian Libraw
Products
Debian Linux Libraw
CVE-2018-5807

LibRaw: out-of-bounds read in samsung_load_raw in internal/dcraw_common.cpp

An error within the "samsung_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause an out-of-bounds read memory access and subsequently cause a crash.

CVSS 3.0 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Canonical Libraw
Products
Ubuntu Linux Libraw
CVE-2018-5806

LibRaw: NULL pointer dereference in leaf_hdr_load_raw() function in internal/dcraw_common.cpp

An error within the "leaf_hdr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to trigger a NULL pointer dereference.

CVSS 3.0 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Libraw Redhat
Products
Libraw Enterprise Linux Enterprise Linux Desktop and 2 more
CVE-2018-5805

LibRaw: Stack-based buffer overflow in quicktake_100_load_raw() function in internal/dcraw_common.cpp

A boundary error within the "quicktake_100_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to cause a stack-based buffer overflow and subsequently cause a crash.

CVSS 3.0 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Libraw Redhat
Products
Libraw Enterprise Linux Enterprise Linux Desktop and 2 more
CVE-2018-5804

LibRaw: type confusion error in identify() function in internal/dcraw_common.cpp

A type confusion error within the "identify()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to trigger a division by zero.

CVSS 3.0 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Libraw
Products
Libraw
CVE-2018-5802

LibRaw: Out-of-bounds read in kodak_radc_load_raw function internal/dcraw_common.cpp

An error within the "kodak_radc_load_raw()" function (internal/dcraw_common.cpp) related to the "buf" variable in LibRaw versions prior to 0.18.7 can be exploited to cause an out-of-bounds read memory access and subsequently cause a crash.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Canonical Debian Libraw and 1 more
Products
Ubuntu Linux Debian Linux Libraw and 4 more
CVE-2018-5801

LibRaw: NULL pointer dereference in LibRaw::unpack function src/libraw_cxx.cpp

An error within the "LibRaw::unpack()" function (src/libraw_cxx.cpp) in LibRaw versions prior to 0.18.7 can be exploited to trigger a NULL pointer dereference.

CVSS 3.0 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Canonical Debian Libraw and 1 more
Products
Ubuntu Linux Debian Linux Libraw and 4 more
CVE-2018-5800

LibRaw: Heap-based buffer overflow in LibRaw::kodak_ycbcr_load_raw function in internal/dcraw_common.cpp

An off-by-one error within the "LibRaw::kodak_ycbcr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.7 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash.

CVSS 3.1 · 6.5 Medium EPSS 2.5% KEV · Not listed
Vendors
Canonical Debian Libraw and 1 more
Products
Ubuntu Linux Debian Linux Libraw and 4 more
CVE-2018-20365

libraw: Heap-based buffer overflow in LibRaw::raw2image() resulting in a denial of service

LibRaw::raw2image() in libraw_cxx.cpp has a heap-based buffer overflow.

CVSS 3.0 · 6.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Libraw
Products
Libraw
CVE-2018-20364

libraw: NULL pointer dereference in LibRaw::copy_bayer resulting in a denial of service

LibRaw::copy_bayer in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.

CVSS 3.0 · 6.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Libraw
Products
Libraw