Search CVE reports
61 – 70 of 70 results
Some fixes available 3 of 119
An error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to corrupt memory.
12 affected packages
libraw, ufraw, darktable, exactimage, dcraw...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libraw | Not affected | Not affected | Not affected | Not affected | Not affected |
| ufraw | Not in release | Not in release | Not in release | Not in release | Needs evaluation |
| darktable | Not affected | Not affected | Not affected | Not affected | Needs evaluation |
| exactimage | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
| dcraw | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| rawtherapee | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| xbmc | Not in release | Not in release | Not in release | Not in release | Not in release |
| kodi | Not affected | Not affected | Not affected | Not affected | Needs evaluation |
| flphoto | Not in release | Not in release | Not in release | Not in release | Not in release |
| freeimage | Not affected | Not affected | Not affected | Not affected | Not affected |
| graphicsmagick | Not affected | Not affected | Not affected | Not affected | Not affected |
| rawstudio | Not in release | Not in release | Not in release | Not in release | Not in release |
A boundary error within the "foveon_load_camf()" function (dcraw_foveon.c) when initializing a huffman table in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a stack-based buffer overflow.
1 affected package
libraw
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libraw | — | — | — | — | — |
An integer overflow error within the "foveon_load_camf()" function (dcraw_foveon.c) in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a heap-based buffer overflow.
1 affected package
libraw
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libraw | — | — | — | — | — |
Some fixes available 1 of 98
The phase_one_correct function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization.
8 affected packages
libraw, ufraw, darktable, exactimage, dcraw...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libraw | Not affected | Not affected | Not affected | Not affected | Not affected |
| ufraw | Not in release | Not in release | Not in release | Not in release | Not affected |
| darktable | Not affected | Not affected | Not affected | Not affected | Not affected |
| exactimage | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
| dcraw | Not affected | Not affected | Not affected | Not affected | Not affected |
| rawtherapee | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
| xbmc | Not in release | Not in release | Not in release | Not in release | Not in release |
| kodi | Needs evaluation | Needs evaluation | Vulnerable | Vulnerable | Vulnerable |
Some fixes available 1 of 121
Array index error in smal_decode_segment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes.
8 affected packages
libraw, ufraw, darktable, exactimage, dcraw...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libraw | Not affected | Not affected | Not affected | Not affected | Not affected |
| ufraw | Not in release | Not in release | Not in release | Not in release | Not affected |
| darktable | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
| exactimage | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
| dcraw | Not affected | Not affected | Not affected | Not affected | Vulnerable |
| rawtherapee | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
| xbmc | Not in release | Not in release | Not in release | Not in release | Not in release |
| kodi | Needs evaluation | Needs evaluation | Vulnerable | Vulnerable | Vulnerable |
Some fixes available 2 of 54
Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service (crash) via a crafted image, which triggers a buffer overflow, related to the len variable.
10 affected packages
libraw, dcraw, kodi, freeimage, darktable...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libraw | Not affected | Not affected | Not affected | Not affected | Not affected |
| dcraw | Not affected | Not affected | Not affected | Not affected | Not affected |
| kodi | Needs evaluation | Needs evaluation | Not affected | Not affected | Not affected |
| freeimage | Not affected | Not affected | Not affected | Not affected | Not affected |
| darktable | Not affected | Not affected | Not affected | Not affected | Not affected |
| ufraw | Not in release | Not in release | Not in release | Not in release | Not affected |
| rawtherapee | Not affected | Not affected | Not affected | Not affected | Not affected |
| exactimage | Not affected | Not affected | Not affected | Not affected | Not affected |
| xbmc | Not in release | Not in release | Not in release | Not in release | Not in release |
| rawstudio | Not in release | Not in release | Not in release | Not in release | Not in release |
Some fixes available 15 of 32
The "faster LJPEG decoder" in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a crafted photo file.
3 affected packages
darktable, libkdcraw, libraw
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| darktable | — | — | — | — | Not affected |
| libkdcraw | — | — | — | — | Not in release |
| libraw | — | — | — | — | Fixed |
Some fixes available 43 of 114
Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, allows context-dependent attackers to cause a denial of service via a crafted photo file that triggers a...
9 affected packages
xmbc, libkdcraw, dcraw, darktable, ufraw...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| xmbc | Not in release | Not in release | Not in release | Not in release | Not in release |
| libkdcraw | Not affected | Not in release | Not in release | Not in release | Not in release |
| dcraw | Not affected | Not affected | Not affected | Not affected | Vulnerable |
| darktable | Not affected | Not affected | Not affected | Not affected | Not affected |
| ufraw | Not in release | Not in release | Not in release | Not in release | Fixed |
| libraw | Fixed | Fixed | Fixed | Fixed | Fixed |
| rawstudio | Not in release | Not in release | Not in release | Not in release | Not in release |
| exactimage | Not affected | Not affected | Not affected | Not affected | Not affected |
| rawtherapee | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
Buffer overflow in the exposure correction code in LibRaw before 0.15.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
3 affected packages
darktable, libkdcraw, libraw
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| darktable | — | — | — | — | — |
| libkdcraw | — | — | — | — | — |
| libraw | — | — | — | — | — |
Some fixes available 22 of 29
Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code...
3 affected packages
darktable, libkdcraw, libraw
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| darktable | — | — | — | — | — |
| libkdcraw | — | — | — | — | — |
| libraw | — | — | — | — | — |