Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2020-35534

In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function (libraw\src\decoders\crx.cpp) when processing cr3 files.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 6.3%
CVSS Severity
CVSS v3 Score 5.5
Products affected by CVE-2020-35534
  • Libraw » Libraw » Version: 0.20.0
    cpe:2.3:a:libraw:libraw:0.20.0
  • Libraw » Libraw » Version: 0.20.1
    cpe:2.3:a:libraw:libraw:0.20.1
  • Libraw » Libraw » Version: 0.20.2
    cpe:2.3:a:libraw:libraw:0.20.2
  • Libraw » Libraw » Version: 0.21.0
    cpe:2.3:a:libraw:libraw:0.21.0


Contact Us

Shodan ® - All rights reserved