Libraw: >> Libraw >> 0.18.13 Security Vulnerabilities
An error within the "parse_rollei()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop.
CVSS Score
7.5
EPSS Score
0.008
Published
2019-02-20
An error within the "parse_sinar_ia()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to exhaust available CPU resources.
CVSS Score
7.5
EPSS Score
0.006
Published
2019-02-20
LibRaw::raw2image in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.
CVSS Score
6.5
EPSS Score
0.009
Published
2018-12-22
LibRaw::copy_bayer in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.
CVSS Score
6.5
EPSS Score
0.005
Published
2018-12-22
LibRaw::raw2image() in libraw_cxx.cpp has a heap-based buffer overflow.
CVSS Score
6.5
EPSS Score
0.01
Published
2018-12-22
Page 2