Vulnerabilities
Vulnerable Software
Libraw:  >> Libraw  >> 0.17.2  Security Vulnerabilities
An error within the "parse_rollei()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop.
CVSS Score
7.5
EPSS Score
0.008
Published
2019-02-20
An error within the "parse_sinar_ia()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to exhaust available CPU resources.
CVSS Score
7.5
EPSS Score
0.006
Published
2019-02-20
LibRaw::raw2image in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.
CVSS Score
6.5
EPSS Score
0.009
Published
2018-12-22
LibRaw::copy_bayer in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.
CVSS Score
6.5
EPSS Score
0.005
Published
2018-12-22
LibRaw::raw2image() in libraw_cxx.cpp has a heap-based buffer overflow.
CVSS Score
6.5
EPSS Score
0.01
Published
2018-12-22
An error within the "find_green()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause a stack-based buffer overflow and subsequently execute arbitrary code.
CVSS Score
8.8
EPSS Score
0.027
Published
2018-12-07
An error within the "LibRaw::parse_exif()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause a stack-based buffer overflow and subsequently execute arbitrary code.
CVSS Score
8.8
EPSS Score
0.022
Published
2018-12-07
An error within the "rollei_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash.
CVSS Score
8.8
EPSS Score
0.006
Published
2018-12-07
An error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause an out-of-bounds read memory access and subsequently cause a crash.
CVSS Score
6.5
EPSS Score
0.004
Published
2018-12-07
An error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to trigger a NULL pointer dereference.
CVSS Score
6.5
EPSS Score
0.005
Published
2018-12-07


Contact Us

Shodan ® - All rights reserved