CVE-2018-10529

An issue was discovered in LibRaw 0.18.9. There is an out-of-bounds read affecting the X3F property table list implementation in librawx3f.cpp and librawcxx.cpp.

References

Affected packages

Git / github.com/libraw/libraw

Affected ranges

Type: GIT
Repo: https://github.com/libraw/libraw
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

87144aa9bb7325b09965b183fa58f957a9a4e4fd

Affected versions

0.*

0.11.0-Release

0.11.1

0.11.2

0.12.0

0.12.1

0.13.0

0.13.1

0.13.2

0.13.3

0.13.4

0.13.5

0.13.6

0.13.7

0.13.8

0.14.0

0.14.1

0.14.2

0.14.3

0.14.4

0.14.5

0.14.6

0.15.0

0.16.0

0.17.0

0.18.0

0.18.1

0.18.2

0.18.3

0.18.4

0.18.5

0.18.6

0.18.7

0.18.8

0.18.9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10529.json"