Not rated
CVE-2018-5800 An off-by-one error within the "LibRaw::kodak_ycbcr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw…
Description
An off-by-one error within the "LibRaw::kodak_ycbcr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.7 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| LibRaw | Versions not published |
References
- github.com github.com
- secuniaresearch.flexerasoftware.com secuniaresearch.flexerasoftware.com
- 79000 secuniaresearch.flexerasoftware.com
- 104663 www.securityfocus.com
- RHSA-2018:3065 access.redhat.com
- USN-3615-1 usn.ubuntu.com
- [debian-lts-announce] 20190328 [SECURITY] [DLA 1734-1] libraw security update lists.debian.org
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of LibRaw
The 26 CVEs of LibRaw →
CVE-2026-5342
A flaw has been found in LibRaw up to 0.22.0
6.9
Medium
CVE-2026-5318
A weakness has been identified in LibRaw up to 0.22.0
5.3
Medium
CVE-2023-1729
A flaw was found in LibRaw
Not rated
CVE-2020-35533
In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobe_copy_pixel()" function…
Not rated