Vulnerabilities > CVE-2020-15365 - Out-of-bounds Write vulnerability in Libraw 0.20

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL

Summary

LibRaw before 0.20-Beta3 has an out-of-bounds write in parse_exif() in metadata\exif_gps.cpp via an unrecognized AtomName and a zero value of tiff_nifds.

Vulnerable Configurations

Part Description Count
Application
Libraw
1

Common Weakness Enumeration (CWE)