A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade LibRaw-develUpgrade LibRaw | May 8, 2024 | May 15, 2023 |
| Alpine Linux | — | Upgrade libraw | Aug 22, 2024 | May 15, 2023 |
| Amazon Linux Ami 2 | — | Upgrade LibRaw-develUpgrade LibRaw-staticUpgrade LibRawUpgrade LibRaw-debuginfo | Sep 8, 2023 | May 15, 2023 |
| Debian | — | Upgrade libraw | May 29, 2023 | May 15, 2023 |
| Gentoo Linux | — | Upgrade media-libs/libraw. | Dec 27, 2023 | May 15, 2023 |
| Huawei Euleros 2_0_sp8 | — | — | Jan 10, 2024 | May 15, 2023 |
| Oracle_linux | — | Upgrade LibRaw-develUpgrade LibRaw | May 7, 2024 | Jan 14, 2023 |
| Redhat_linux | — | Upgrade LibRaw-samples-debuginfoNo solution existsUpgrade LibRaw-develUpgrade LibRaw-debugsourceUpgrade LibRawUpgrade LibRaw-debuginfo | May 1, 2024 | May 15, 2023 |
| Rocky_linux | — | Upgrade LibRaw-debuginfoUpgrade LibRaw-develUpgrade LibRaw-debugsourceUpgrade LibRaw | May 8, 2025 | May 15, 2023 |
| Suse | — | Upgrade libraw16Upgrade libraw-toolsUpgrade libraw20Upgrade libraw20-32bitUpgrade libraw9Upgrade libraw-develUpgrade libraw-devel-static | May 16, 2023 | May 15, 2023 |
| Ubuntu | — | Upgrade libraw20Upgrade libraw19Upgrade showfoto (Ubuntu Pro)Upgrade digikam (Ubuntu Pro) | Jun 6, 2023 | May 15, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub