CVE-2023-1729
EUVD-2023-2395215.05.2023, 22:15
A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| libraw | libraw | 𝑥 < 0.21.2 |
| redhat | enterprise_linux | 7.0 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| darktable |
| ||||||||||||||||||||
| dcraw |
| ||||||||||||||||||||
| digikam |
| ||||||||||||||||||||
| exactimage |
| ||||||||||||||||||||
| kodi |
| ||||||||||||||||||||
| libraw |
| ||||||||||||||||||||
| rawtherapee |
| ||||||||||||||||||||
| ufraw |
| ||||||||||||||||||||
| xbmc |
|
Common Weakness Enumeration
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory BufferThe software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
- CWE-787 - Out-of-bounds WriteThe software writes data past the end, or before the beginning, of the intended buffer.
References