CVE-2018-20337

There is a stack-based buffer overflow in the parsemakernote function of dcrawcommon.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact.

References

Affected packages

Git / github.com/libraw/libraw

Affected ranges

Type

GIT

Repo

https://github.com/libraw/libraw

Events

Introduced

Last affected

e12cae8cbc7c73a7200f6e7621d71e113885ea72

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.19.1"
        }
    ]
}

Affected versions

0.*

0.11.0-Release

0.11.1

0.11.2

0.12.0

0.12.1

0.13.0

0.13.1

0.13.2

0.13.3

0.13.4

0.13.5

0.13.6

0.13.7

0.13.8

0.14.0

0.14.1

0.14.2

0.14.3

0.14.4

0.14.5

0.14.6

0.15.0

0.16.0

0.17.0

0.18.0

0.19.0

0.19.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20337.json"