A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade LibRawUpgrade LibRaw-devel | May 8, 2024 | May 15, 2023 |
| Alpine Linux | — | Upgrade libraw | Aug 22, 2024 | May 15, 2023 |
| Amazon Linux Ami 2 | — | Upgrade LibRawUpgrade LibRaw-develUpgrade LibRaw-staticUpgrade LibRaw-debuginfo | Sep 8, 2023 | May 15, 2023 |
| Debian | — | Upgrade libraw | May 29, 2023 | May 15, 2023 |
| Gentoo Linux | — | Upgrade media-libs/libraw. | Dec 27, 2023 | May 15, 2023 |
| Huawei Euleros 2_0_sp8 | — | — | Jan 10, 2024 | May 15, 2023 |
| Oracle_linux | — | Upgrade LibRawUpgrade LibRaw-devel | May 7, 2024 | Jan 14, 2023 |
| Redhat_linux | — | Upgrade LibRaw-samples-debuginfoNo solution existsUpgrade LibRaw-develUpgrade LibRaw-debugsourceUpgrade LibRaw-debuginfoUpgrade LibRaw | May 1, 2024 | May 15, 2023 |
| Rocky_linux | — | Upgrade LibRawUpgrade LibRaw-debuginfoUpgrade LibRaw-develUpgrade LibRaw-debugsource | May 8, 2025 | May 15, 2023 |
| Suse | — | Upgrade libraw16Upgrade libraw20Upgrade libraw-toolsUpgrade libraw-develUpgrade libraw9Upgrade libraw20-32bitUpgrade libraw-devel-static | May 16, 2023 | May 15, 2023 |
| Ubuntu | — | Upgrade libraw20Upgrade showfoto (Ubuntu Pro)Upgrade libraw19Upgrade digikam (Ubuntu Pro) | Jun 6, 2023 | May 15, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub