CVE-2018-5806

Published: Dec 7, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

An error within the "leaf_hdr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to trigger a NULL pointer dereference.

Vendor	Product	Versions
n/a	LibRaw	affected `Prior to 0.18.8`

References

81000

third-party-advisory

x_refsource_SECUNIA

https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt

x_refsource_MISC

RHSA-2018:3065

vendor-advisory

x_refsource_REDHAT

https://github.com/LibRaw/LibRaw/commit/9f26ce37f5be86ea11bfc6831366558650b1f6ff

x_refsource_MISC

https://secuniaresearch.flexerasoftware.com/secunia_research/2018-3/

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2018-5806

Description

Affected Products

References