Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: LibRaw Component: Libraw-demosaic-pack-gpl2 Clear all filters
TI-2017-04622 CVE-2017-6890 · GHSA-h3rm-p42x-h7h7

Memory corruption in LibRaw-demosaic-pack-GPL2

Priority MEDIUM 45

A boundary error within the "foveon_load_camf()" function (dcraw_foveon.c) when initializing a huffman table in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a stack-based buffer overflow.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01479 Published 2017-05-15 Fixed in 0.18.2 CWE-119
TI-2017-04621 CVE-2017-6889 · GHSA-hh27-7rq7-g8w3

Integer overflow in LibRaw-demosaic-pack-GPL2

Priority MEDIUM 45

An integer overflow error within the "foveon_load_camf()" function (dcraw_foveon.c) in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a heap-based buffer overflow.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01479 Published 2017-05-15 Fixed in 0.18.2 CWE-190