Vulnerabilities > Libraw > Libraw > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-08-22 | CVE-2020-22628 | Classic Buffer Overflow vulnerability in Libraw Buffer Overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspect_ratio.cpp. | 6.5 |
| 2023-05-15 | CVE-2023-1729 | Out-of-bounds Write vulnerability in multiple products A flaw was found in LibRaw. | 6.5 |
| 2022-09-01 | CVE-2020-35530 | Out-of-bounds Write vulnerability in multiple products In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patched.cpp) that can be triggered via a crafted X3F file. | 5.5 |
| 2022-09-01 | CVE-2020-35531 | Out-of-bounds Read vulnerability in multiple products In LibRaw, an out-of-bounds read vulnerability exists within the get_huffman_diff() function (libraw\src\x3f\x3f_utils_patched.cpp) when reading data from an image file. | 5.5 |
| 2022-09-01 | CVE-2020-35532 | Out-of-bounds Read vulnerability in multiple products In LibRaw, an out-of-bounds read vulnerability exists within the "simple_decode_row()" function (libraw\src\x3f\x3f_utils_patched.cpp) which can be triggered via an image with a large row_stride field. | 5.5 |
| 2022-09-01 | CVE-2020-35533 | Out-of-bounds Read vulnerability in multiple products In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobe_copy_pixel()" function (libraw\src\decoders\dng.cpp) when reading data from the image file. | 5.5 |
| 2022-09-01 | CVE-2020-35534 | Allocation of Resources Without Limits or Throttling vulnerability in Libraw In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function (libraw\src\decoders\crx.cpp) when processing cr3 files. | 5.5 |
| 2022-09-01 | CVE-2020-35535 | Out-of-bounds Read vulnerability in Libraw In LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF()" function (libraw\src\metadata\sony.cpp) when processing srf files. | 5.5 |
| 2020-09-16 | CVE-2020-24890 | NULL Pointer Dereference vulnerability in Libraw 0.20.0 libraw 20.0 has a null pointer dereference vulnerability in parse_tiff_ifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code execution. | 5.5 |
| 2020-06-28 | CVE-2020-15365 | Out-of-bounds Write vulnerability in Libraw 0.20 LibRaw before 0.20-Beta3 has an out-of-bounds write in parse_exif() in metadata\exif_gps.cpp via an unrecognized AtomName and a zero value of tiff_nifds. | 6.5 |