LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp, postprocessing/mem_image.cpp, and utils/thumb_utils.cpp. For example, malloc(sizeof(libraw_processed_image_t)+T.tlength) occurs without validating T.tlength.
CVSS Score
7.5
EPSS Score
0.032
Published
2020-07-02
LibRaw::raw2image in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.
CVSS Score
6.5
EPSS Score
0.005
Published
2018-12-22
LibRaw::copy_bayer in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.
CVSS Score
6.5
EPSS Score
0.005
Published
2018-12-22
LibRaw::raw2image() in libraw_cxx.cpp has a heap-based buffer overflow.
CVSS Score
6.5
EPSS Score
0.004
Published
2018-12-22
There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact.
CVSS Score
8.8
EPSS Score
0.004
Published
2018-12-21
Page 2