Unrated severityNVD Advisory· Published Apr 18, 2022· Updated Aug 3, 2024
CVE-2021-3624
CVE-2021-3624
Description
There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code may be executed in the victim's system.
Affected products
5- dcraw/dcrawdescription
- osv-coords4 versionspkg:rpm/opensuse/dcraw&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/dcraw&distro=openSUSE%20Tumbleweedpkg:rpm/suse/dcraw&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/dcraw&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5
< 9.28.0-150000.3.3.1+ 3 more
- (no CPE)range: < 9.28.0-150000.3.3.1
- (no CPE)range: < 9.28.0-2.1
- (no CPE)range: < 9.28.0-3.3.1
- (no CPE)range: < 9.28.0-3.3.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- bugs.debian.org/cgi-bin/bugreport.cgimitrex_refsource_MISC
News mentions
0No linked articles in our index yet.