Search CVE reports
1 – 4 of 4 results
Some fixes available 15 of 32
The "faster LJPEG decoder" in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a crafted photo file.
3 affected packages
darktable, libkdcraw, libraw
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| darktable | — | — | — | — | Not affected |
| libkdcraw | — | — | — | — | Not in release |
| libraw | — | — | — | — | Fixed |
Some fixes available 43 of 114
Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, allows context-dependent attackers to cause a denial of service via a crafted photo file that triggers a...
9 affected packages
xmbc, libkdcraw, dcraw, darktable, ufraw...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| xmbc | Not in release | Not in release | Not in release | Not in release | Not in release |
| libkdcraw | Not affected | Not in release | Not in release | Not in release | Not in release |
| dcraw | Not affected | Not affected | Not affected | Not affected | Vulnerable |
| darktable | Not affected | Not affected | Not affected | Not affected | Not affected |
| ufraw | Not in release | Not in release | Not in release | Not in release | Fixed |
| libraw | Fixed | Fixed | Fixed | Fixed | Fixed |
| rawstudio | Not in release | Not in release | Not in release | Not in release | Not in release |
| exactimage | Not affected | Not affected | Not affected | Not affected | Not affected |
| rawtherapee | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
Buffer overflow in the exposure correction code in LibRaw before 0.15.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
3 affected packages
darktable, libkdcraw, libraw
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| darktable | — | — | — | — | — |
| libkdcraw | — | — | — | — | — |
| libraw | — | — | — | — | — |
Some fixes available 22 of 29
Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code...
3 affected packages
darktable, libkdcraw, libraw
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| darktable | — | — | — | — | — |
| libkdcraw | — | — | — | — | — |
| libraw | — | — | — | — | — |