CVE-2020-15503

Source
https://nvd.nist.gov/vuln/detail/CVE-2020-15503
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-15503.json
Related
Published
2020-07-02T14:15:11Z
Modified
2023-11-29T08:07:09.428398Z
Details

LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpackthumb.cpp, postprocessing/memimage.cpp, and utils/thumbutils.cpp. For example, malloc(sizeof(librawprocessedimaget)+T.tlength) occurs without validating T.tlength.

References

Affected packages

Git / github.com/LibRaw/LibRaw

Affected ranges

Type
GIT
Repo
https://github.com/LibRaw/LibRaw
Events
Introduced
0The exact introduced commit is unknown
Fixed
20ad21c0d87ca80217aee47533d91e633ce1864d
Type
GIT
Repo
https://github.com/libraw/libraw
Events
Introduced
0The exact introduced commit is unknown
Last affected
beeb572687270d49c16734c9ca620982151dbeff

Affected versions

0.*

0.11.0-Release
0.11.1
0.11.2
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.13.4
0.13.5
0.13.6
0.13.7
0.13.8
0.14.0
0.14.1
0.14.2
0.14.3
0.14.4
0.14.5
0.14.6
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5