Vulnerability in Libraw
CVE-2013-1439
The "faster LJPEG decoder" in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a crafted photo file.
EPSS: 0.018 (76.2th percentile) — read the EPSS interpretation.
Affected products
- Libraw — versions 0.13.0, 0.13.1, 0.13.2
- N/a — versions n/a
References
- security@debian.org (vendor-advisory, x_refsource_DEBIAN)
- security@debian.org (x_refsource_CONFIRM, Exploit, Patch)
- security@debian.org (mailing-list, x_refsource_MLIST, Exploit, Patch)