Libraw · Libraw · CVE-2018-5810
**Name of the Vulnerable Software and Affected Versions**
LibRaw versions prior to 0.18.9
**Description**
The issue is related to an error within the `rollei load raw()` function in the internal/dcraw common.cpp component of LibRaw, which can cause a heap-based buffer overflow. This can lead to a crash and potentially allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.
**Recommendations**
For versions prior to 0.18.9, update to version 0.18.9 or later to resolve the issue.
As a temporary workaround, consider disabling the `rollei load raw()` function until a patch is available.