← All advisories

Medium severity6.5OSV Advisory· Published Dec 22, 2018· Updated Jun 17, 2026

CVE-2018-20365

CVE-2018-20365

Description

LibRaw::raw2image() in libraw_cxx.cpp has a heap-based buffer overflow.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11

Libraw/LibrawOSV3 versions
0.12.0, 0.13.0, 0.13.1, …+ 2 more
- (no CPE)range: 0.12.0, 0.13.0, 0.13.1, …
- (no CPE)
- cpe:2.3:a:libraw:libraw:*:*:*:*:*:*:*:*range: <=0.19.1
osv-coords8 versions
pkg:rpm/suse/libraw&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/opensuse/libraw&distro=openSUSE%20Leap%2015.0 pkg:rpm/suse/libraw&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4 pkg:rpm/suse/libraw&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP4 pkg:rpm/suse/libraw&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/libraw&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4 pkg:rpm/suse/libraw&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/libraw&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015
< 0.15.4-30.1+ 7 more
- (no CPE)range: < 0.15.4-30.1
- (no CPE)range: < 0.18.9-lp150.2.6.1
- (no CPE)range: < 0.15.4-30.1
- (no CPE)range: < 0.15.4-30.1
- (no CPE)range: < 0.15.4-30.1
- (no CPE)range: < 0.15.4-30.1
- (no CPE)range: < 0.15.4-30.1
- (no CPE)range: < 0.18.9-3.8.1

Patches

Vulnerability mechanics

References

3

github.com/LibRaw/LibRaw/issues/195nvdExploitPatchThird Party Advisory
www.securityfocus.com/bid/106299nvdThird Party AdvisoryVDB Entry
usn.ubuntu.com/3989-1/nvd

News mentions

0

No linked articles in our index yet.