Remote No

Type Arbitrary code execution

Description

A stack-based buffer overflow was discovered in xtrans_interpolate in internal/dcraw_common.cpp in LibRaw before 0.18.3 leading to denial of service or arbitrary code execution.

AVG-410 libraw 0.18.4-1 0.18.5-1 High Fixed

22 Sep 2017 ASA-201709-18 AVG-410 libraw High multiple issues

https://github.com/LibRaw/LibRaw/issues/99