Read the docs

LibRaw

Records66All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical17CVSS 9.0–10.0
CVSS high22CVSS 7.0–8.9

Exploited now

LibRaw records in CISA KEV

No LibRaw vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Libraw 63 records HIGH Libraw-demosaic-pack-gpl2 2 records MEDIUM

Records

2 records in Libraw-demosaic-pack-gpl2 · all components

TI-2017-04622 CVE-2017-6890 · GHSA-h3rm-p42x-h7h7

Memory corruption in LibRaw-demosaic-pack-GPL2

Priority MEDIUM 45

A boundary error within the "foveon_load_camf()" function (dcraw_foveon.c) when initializing a huffman table in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a stack-based buffer overflow.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01479 Published 2017-05-15 Fixed in 0.18.2 CWE-119
TI-2017-04621 CVE-2017-6889 · GHSA-hh27-7rq7-g8w3

Integer overflow in LibRaw-demosaic-pack-GPL2

Priority MEDIUM 45

An integer overflow error within the "foveon_load_camf()" function (dcraw_foveon.c) in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a heap-based buffer overflow.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01479 Published 2017-05-15 Fixed in 0.18.2 CWE-190
Open these records in search →