Sign in Subscribe

← All advisories

Unrated severityOSV Advisory· Published Dec 22, 2018· Updated Aug 5, 2024

CVE-2018-20365

CVE-2018-20365

Description

LibRaw::raw2image() in libraw_cxx.cpp has a heap-based buffer overflow.

Affected products

9

Libraw/LibrawOSV
Range: 0.12.0, 0.13.0, 0.13.1, …
osv-coords8 versions
pkg:rpm/opensuse/libraw&distro=openSUSE%20Leap%2015.0 pkg:rpm/suse/libraw&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/libraw&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4 pkg:rpm/suse/libraw&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/libraw&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4 pkg:rpm/suse/libraw&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/libraw&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP4 pkg:rpm/suse/libraw&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015
< 0.18.9-lp150.2.6.1+ 7 more
- (no CPE)range: < 0.18.9-lp150.2.6.1
- (no CPE)range: < 0.15.4-30.1
- (no CPE)range: < 0.15.4-30.1
- (no CPE)range: < 0.15.4-30.1
- (no CPE)range: < 0.15.4-30.1
- (no CPE)range: < 0.15.4-30.1
- (no CPE)range: < 0.15.4-30.1
- (no CPE)range: < 0.18.9-3.8.1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

usn.ubuntu.com/3989-1/mitrevendor-advisoryx_refsource_UBUNTU
www.securityfocus.com/bid/106299mitrevdb-entryx_refsource_BID
github.com/LibRaw/LibRaw/issues/195mitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.