CVE-2021-3624

Related Vulnerabilities: CVE-2021-3624  

There is a flaw in dcraw. An attacker who is able to convince a victim to open a crafted file with dcraw could trigger an unsigned integer wraparound, leading to out-of-bounds write. The greatest impact from this flaw is to system availability, data integrity, and data confidentiality.

Description

There is a flaw in dcraw. An attacker who is able to convince a victim to open a crafted file with dcraw could trigger an unsigned integer wraparound, leading to out-of-bounds write. The greatest impact from this flaw is to system availability, data integrity, and data confidentiality.

Additional Information

  • Bugzilla 1968040: CVE-2021-3624 dcraw: Buffer overflow caused by integer-overflow in foveon_load_camf()
  • CWE-20->CWE-190->CWE-787: Improper Input Validation leads to Integer Overflow or Wraparound leads to Out-of-bounds Write
  • FAQ: Frequently asked questions about CVE-2021-3624