Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2015-3885

dcraw: input sanitization flaw leading to buffer overflow

Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service (crash) via a crafted image, which triggers a buffer overflow, related to the len variable.

CVSS 2.0 · 4.3 Medium EPSS 5.4% KEV · Not listed
Vendors
Dcraw Project Fedoraproject
Products
Dcraw Fedora
CVE-2021-3624

dcraw: Buffer overflow caused by integer-overflow in foveon_load_camf()

There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code may be executed in the victim's system.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Dcraw Project Debian
Products
Dcraw Debian Linux
CVE-2018-19655

dcraw: Stack-based buffer overflow in the find_green() function

A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file.

CVSS 3.0 · 8.8 High EPSS 2.9% KEV · Not listed
Vendors
Dcraw Project Suse
Products
Dcraw Suse Linux Enterprise Desktop Suse Linux Enterprise Server
CVE-2018-19568

dcraw: A floating point exception in kodak_radc_load_raw resulting in a denial of service

A floating point exception in kodak_radc_load_raw in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Dcraw Project
Products
Dcraw
CVE-2018-19567

dcraw: A floating point exception in parse_tiff_ifd resulting in a denial of service

A floating point exception in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Dcraw Project
Products
Dcraw
CVE-2018-19566

dcraw: Heap buffer over-read in parse_tiff_ifd resulting in a denial of service or information leak

A heap buffer over-read in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information.

CVSS 3.0 · 7.1 High EPSS 1.1% KEV · Not listed
Vendors
Dcraw Project
Products
Dcraw
CVE-2018-19565

dcraw: Buffer over-read in crop_masked_pixels resulting in denial of service or information leak

A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information.

CVSS 3.0 · 7.1 High EPSS 1.1% KEV · Not listed
Vendors
Dcraw Project
Products
Dcraw