Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

TI-2018-04202 CVE-2018-5802 · GHSA-j2qq-rw4v-jjx2

Out-of-bounds read in LibRaw

Priority MEDIUM 42

An error within the "kodak_radc_load_raw()" function (internal/dcraw_common.cpp) related to the "buf" variable in LibRaw versions prior to 0.18.7 can be exploited to cause an out-of-bounds read memory access and subseque…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01974 Published 2018-12-07 Partial fix · 0.18.7 CWE-125
TI-2018-04201 CVE-2018-5801 · GHSA-chvh-r3pc-vjf8

NULL pointer dereference in LibRaw

Priority LOW 33

An error within the "LibRaw::unpack()" function (src/libraw_cxx.cpp) in LibRaw versions prior to 0.18.7 can be exploited to trigger a NULL pointer dereference.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.02039 Published 2018-12-07 Partial fix · 0.18.7 CWE-476
TI-2018-04200 CVE-2018-5800 · GHSA-5qjx-g7m8-vp5f

Out-of-bounds write in LibRaw

Priority LOW 34

An off-by-one error within the "LibRaw::kodak_ycbcr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.7 can be exploited to cause a heap-based buffer overflow and subsequently cause a cras…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02548 Published 2018-12-07 Partial fix · 0.18.7 CWE-193
TI-2017-12451 CVE-2017-16910 · GHSA-v878-x7w4-9pgr

Out-of-bounds read in LibRaw

Priority LOW 32

An error within the "LibRaw::xtrans_interpolate()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read memory access and subsequently a Denial of Service cond…

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01788 Published 2018-12-07 Partial fix · 0.18.6 CWE-125
TI-2017-12450 CVE-2017-16909 · GHSA-g6m7-c354-x2mp

Memory corruption in LibRaw

Priority MEDIUM 42

An error related to the "LibRaw::panasonic_load_raw()" function (dcraw_common.cpp) in LibRaw versions prior to 0.18.6 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash via a specially…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01984 Published 2018-12-07 Partial fix · 0.18.6 CWE-119