A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade LibRawUpgrade LibRaw-devel | May 8, 2024 | May 15, 2023 |
| Alpine Linux | — | Upgrade libraw | Aug 22, 2024 | May 15, 2023 |
| Amazon Linux Ami 2 | — | Upgrade LibRaw-staticUpgrade LibRaw-develUpgrade LibRawUpgrade LibRaw-debuginfo | Sep 8, 2023 | May 15, 2023 |
| Debian | — | Upgrade libraw | May 29, 2023 | May 15, 2023 |
| Gentoo Linux | — | Upgrade media-libs/libraw. | Dec 27, 2023 | May 15, 2023 |
| Huawei Euleros 2_0_sp8 | — | — | Jan 10, 2024 | May 15, 2023 |
| Oracle_linux | — | Upgrade LibRaw-develUpgrade LibRaw | May 7, 2024 | Jan 14, 2023 |
| Redhat_linux | — | Upgrade LibRaw-develUpgrade LibRaw-debugsourceUpgrade LibRawUpgrade LibRaw-debuginfoUpgrade LibRaw-samples-debuginfoNo solution exists | May 1, 2024 | May 15, 2023 |
| Rocky_linux | — | Upgrade LibRaw-develUpgrade LibRaw-debuginfoUpgrade LibRaw-debugsourceUpgrade LibRaw | May 8, 2025 | May 15, 2023 |
| Suse | — | Upgrade libraw16Upgrade libraw20Upgrade libraw-toolsUpgrade libraw9Upgrade libraw-devel-staticUpgrade libraw20-32bitUpgrade libraw-devel | May 16, 2023 | May 15, 2023 |
| Ubuntu | — | Upgrade libraw20Upgrade libraw19Upgrade showfoto (Ubuntu Pro)Upgrade digikam (Ubuntu Pro) | Jun 6, 2023 | May 15, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub