Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 68

Export CSV
CVE-2018-20363

libraw: NULL pointer dereference in LibRaw::raw2image resulting in a denial of service

LibRaw::raw2image in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.

CVSS 3.0 · 6.5 Medium EPSS 2.8% KEV · Not listed
Vendors
Libraw
Products
Libraw
CVE-2018-20337

LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp

There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact.

CVSS 3.0 · 8.8 High EPSS 2.1% KEV · Not listed
Vendors
Libraw Redhat
Products
Libraw Enterprise Linux
CVE-2018-10529

LibRaw: Out-of-bounds read in X3F property table list functionality in libraw_x3f.cpp and libraw_cxx.cpp

An issue was discovered in LibRaw 0.18.9. There is an out-of-bounds read affecting the X3F property table list implementation in libraw_x3f.cpp and libraw_cxx.cpp.

CVSS 3.0 · 8.8 High EPSS 1.9% KEV · Not listed
Vendors
Canonical Libraw
Products
Ubuntu Linux Libraw
CVE-2018-10528

LibRaw: Stack-based buffer overflow in libraw_cxx.cpp:utf2char() allows for potential code execution

An issue was discovered in LibRaw 0.18.9. There is a stack-based buffer overflow in the utf2char function in libraw_cxx.cpp.

CVSS 3.1 · 8.8 High EPSS 2.5% KEV · Not listed
Vendors
Canonical Libraw
Products
Ubuntu Linux Libraw
CVE-2017-16910

libraw: Invalid read memory access in the LibRaw::xtrans_interpolate() function

An error within the "LibRaw::xtrans_interpolate()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read memory access and subsequently a Denial of Service condition.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Canonical Libraw
Products
Ubuntu Linux Libraw
CVE-2017-16909

libraw: Heap-buffer overflow in the LibRaw::panasonic_load_raw() function

An error related to the "LibRaw::panasonic_load_raw()" function (dcraw_common.cpp) in LibRaw versions prior to 0.18.6 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash via a specially crafted TIFF image.

CVSS 3.0 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Canonical Libraw
Products
Ubuntu Linux Libraw
CVE-2015-8367

LibRaw: Memory objects are not intialized properly

The phase_one_correct function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization.

CVSS 3.1 · 9.8 Critical EPSS 5.6% KEV · Not listed
Vendors
Libraw
Products
Libraw
CVE-2015-8366

LibRaw: Index overflow in smal_decode_segment

Array index error in smal_decode_segment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes.

CVSS 3.1 · 9.8 Critical EPSS 5.1% KEV · Not listed
Vendors
Libraw
Products
Libraw