A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade LibRawUpgrade LibRaw-devel | May 8, 2024 | May 15, 2023 |
| Alpine Linux | — | Upgrade libraw | Aug 22, 2024 | May 15, 2023 |
| Amazon Linux Ami 2 | — | Upgrade LibRaw-debuginfoUpgrade LibRaw-develUpgrade LibRaw-staticUpgrade LibRaw | Sep 8, 2023 | May 15, 2023 |
| Debian | — | Upgrade libraw | May 29, 2023 | May 15, 2023 |
| Gentoo Linux | — | Upgrade media-libs/libraw. | Dec 27, 2023 | May 15, 2023 |
| Huawei Euleros 2_0_sp8 | — | — | Jan 10, 2024 | May 15, 2023 |
| Oracle_linux | — | Upgrade LibRawUpgrade LibRaw-devel | May 7, 2024 | Jan 14, 2023 |
| Redhat_linux | — | No solution existsUpgrade LibRaw-samples-debuginfoUpgrade LibRawUpgrade LibRaw-debuginfoUpgrade LibRaw-debugsourceUpgrade LibRaw-devel | May 1, 2024 | May 15, 2023 |
| Rocky_linux | — | Upgrade LibRawUpgrade LibRaw-debugsourceUpgrade LibRaw-debuginfoUpgrade LibRaw-devel | May 8, 2025 | May 15, 2023 |
| Suse | — | Upgrade libraw9Upgrade libraw-devel-staticUpgrade libraw-develUpgrade libraw20-32bitUpgrade libraw20Upgrade libraw-toolsUpgrade libraw16 | May 16, 2023 | May 15, 2023 |
| Ubuntu | — | Upgrade libraw20Upgrade libraw19Upgrade digikam (Ubuntu Pro)Upgrade showfoto (Ubuntu Pro) | Jun 6, 2023 | May 15, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub