Vulnerabilities > Libraw > Libraw > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-08-22 | CVE-2020-22628 | Classic Buffer Overflow vulnerability in Libraw Buffer Overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspect_ratio.cpp. | 6.5 |
| 2023-05-15 | CVE-2023-1729 | Out-of-bounds Write vulnerability in multiple products A flaw was found in LibRaw. | 6.5 |
| 2022-09-01 | CVE-2020-35530 | Out-of-bounds Write vulnerability in multiple products In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patched.cpp) that can be triggered via a crafted X3F file. | 5.5 |
| 2022-09-01 | CVE-2020-35531 | Out-of-bounds Read vulnerability in multiple products In LibRaw, an out-of-bounds read vulnerability exists within the get_huffman_diff() function (libraw\src\x3f\x3f_utils_patched.cpp) when reading data from an image file. | 5.5 |
| 2022-09-01 | CVE-2020-35532 | Out-of-bounds Read vulnerability in multiple products In LibRaw, an out-of-bounds read vulnerability exists within the "simple_decode_row()" function (libraw\src\x3f\x3f_utils_patched.cpp) which can be triggered via an image with a large row_stride field. | 5.5 |
| 2020-09-16 | CVE-2020-24890 | NULL Pointer Dereference vulnerability in Libraw 0.20.0 libraw 20.0 has a null pointer dereference vulnerability in parse_tiff_ifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code execution. | 5.5 |
| 2020-06-28 | CVE-2020-15365 | Out-of-bounds Write vulnerability in Libraw 0.20 LibRaw before 0.20-Beta3 has an out-of-bounds write in parse_exif() in metadata\exif_gps.cpp via an unrecognized AtomName and a zero value of tiff_nifds. | 4.3 |
| 2019-02-20 | CVE-2018-5818 | Infinite Loop vulnerability in multiple products An error within the "parse_rollei()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop. | 5.0 |
| 2019-02-20 | CVE-2018-5817 | Incorrect Type Conversion or Cast vulnerability in multiple products A type confusion error within the "unpacked_load_raw()" function within LibRaw versions prior to 0.19.1 (internal/dcraw_common.cpp) can be exploited to trigger an infinite loop. | 5.0 |
| 2018-12-22 | CVE-2018-20365 | Out-of-bounds Write vulnerability in Libraw LibRaw::raw2image() in libraw_cxx.cpp has a heap-based buffer overflow. | 4.3 |