CVE-2020-35530
01.09.2022, 18:15
In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patched.cpp) that can be triggered via a crafted X3F file.Enginsight
| Vendor | Product | Version |
|---|---|---|
| libraw | libraw | 0.20.0 |
| libraw | libraw | 0.20.0:rc2 |
| libraw | libraw | 0.20.1 |
| libraw | libraw | 0.20.2 |
| libraw | libraw | 0.21.0:beta1 |
| debian | debian_linux | 10.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| darktable |
| ||||||||||||||||||
| dcraw |
| ||||||||||||||||||
| digikam |
| ||||||||||||||||||
| exactimage |
| ||||||||||||||||||
| kodi |
| ||||||||||||||||||
| libraw |
| ||||||||||||||||||
| rawtherapee |
| ||||||||||||||||||
| ufraw |
| ||||||||||||||||||
| xbmc |
|
Common Weakness Enumeration
References