Dcraw_project Dcraw
7 CVEs affecting Dcraw_project Dcraw. Latest disclosed: 2022-04-18. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-19655 | High | 8.8 | 2018-11-29 | A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker t… |
CVE-2021-3624 | High | 7.8 | 2022-04-18 | There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code may be executed in t… |
CVE-2018-19566 | High | 7.1 | 2018-11-26 | A heap buffer over-read in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles… |
CVE-2018-19565 | High | 7.1 | 2018-11-26 | A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles t… |
CVE-2018-19568 | Medium | 5.5 | 2018-11-26 | A floating point exception in kodak_radc_load_raw in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that… |
CVE-2018-19567 | Medium | 5.5 | 2018-11-26 | A floating point exception in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundl… |
CVE-2015-3885 | | 2015-05-19 | Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service (crash) via a crafted image, which… |