Published: 15/05/2023 Updated: 22/12/2023

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 0

A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libraw libraw
fedoraproject fedora 37
fedoraproject fedora 38
redhat enterprise linux 7.0
redhat enterprise linux 8.0
redhat enterprise linux 9.0

Debian Bug report logs - #1036281 libraw: CVE-2023-1729 Package: src:libraw; Maintainer for src:libraw is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Affects: darktable Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Thu, 18 May 2023 13:24:01 UTC Severity: grave Tags: security, ...

Several vulnerabilities were discovered in libraw, a library for reading RAW files obtained from digital photo cameras, which may result in denial of service or the execution of arbitrary code if specially crafted files are processed For the stable distribution (bullseye), these problems have been fixed in version 0202-1+deb11u1 We recommend th ...

In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobe_copy_pixel()" function (libraw\src\decoders\dngcpp) when reading data from the image file (CVE-2020-35533) A flaw was found in LibRaw A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to application crash (CVE-2023-1729) ...

CWE-787 https://bugzilla.redhat.com/show_bug.cgi?id=2188240 https://github.com/LibRaw/LibRaw/issues/557 https://lists.debian.org/debian-lts-announce/2023/05/msg00025.html https://www.debian.org/security/2023/dsa-5412 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E5ZJ3UBTJBZHNPJQFOSGM5L7WAHHE2GY/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AGZ6XF5WTPJ4GLXQ62JVRDZSVSJHXNQU/https://security.gentoo.org/glsa/202312-08 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036281 https://nvd.nist.gov https://www.debian.org/security/2023/dsa-5412

CVE-2023-1729

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect