Not rated
CVE-2018-5815 An integer overflow error within the "parse_qt()" function (internal/dcraw_common.cpp) in LibRaw versions prior to…
Description
An integer overflow error within the "parse_qt()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.12 can be exploited to trigger an infinite loop via a specially crafted Apple QuickTime file.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| LibRaw | Versions not published |
References
- secuniaresearch.flexerasoftware.com secuniaresearch.flexerasoftware.com
- github.com github.com
- USN-3838-1 usn.ubuntu.com
- 83507 secuniaresearch.flexerasoftware.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of LibRaw
The 26 CVEs of LibRaw →
CVE-2026-5342
A flaw has been found in LibRaw up to 0.22.0
6.9
Medium
CVE-2026-5318
A weakness has been identified in LibRaw up to 0.22.0
5.3
Medium
CVE-2023-1729
A flaw was found in LibRaw
Not rated
CVE-2020-35533
In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobe_copy_pixel()" function…
Not rated