Related Vulnerabilities: CVE-2018-10529  

An out-of-bounds read has been found in LibRaw before 0.18.10, in the X3F property table list implementation in libraw_x3f.cpp and libraw_cxx.cpp

Severity Medium

Remote Yes

Type Information disclosure

Description

An out-of-bounds read has been found in LibRaw before 0.18.10, in the X3F property table list implementation in libraw_x3f.cpp and libraw_cxx.cpp

AVG-681 libraw 0.18.9-1 0.18.10-1 Critical Fixed FS#58393

09 May 2018 ASA-201805-2 AVG-681 libraw Critical multiple issues

https://github.com/LibRaw/LibRaw/issues/144
https://github.com/LibRaw/LibRaw/commit/f0c505a3e5d47989a5f69be2d0d4f250af6b1a6c
https://github.com/LibRaw/LibRaw/commit/6b08eae24034789b3543a1b66dd6af9c20230029