CVE-2018-5801

Published: Dec 7, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

An error within the "LibRaw::unpack()" function (src/libraw_cxx.cpp) in LibRaw versions prior to 0.18.7 can be exploited to trigger a NULL pointer dereference.

Vendor	Product	Versions
n/a	LibRaw	affected `Prior to 0.18.7`

References

https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt

x_refsource_MISC

https://secuniaresearch.flexerasoftware.com/secunia_research/2018-1/

x_refsource_MISC

79000

third-party-advisory

x_refsource_SECUNIA

https://github.com/LibRaw/LibRaw/commit/0df5490b985c419de008d32168650bff17128914

x_refsource_MISC

RHSA-2018:3065

vendor-advisory

x_refsource_REDHAT

USN-3615-1

vendor-advisory

x_refsource_UBUNTU

[debian-lts-announce] 20190328 [SECURITY] [DLA 1734-1] libraw security update

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2018-5801

Description

Affected Products

References