PT-2018-3969 · Libraw+3 · Libraw+3
Alextutubalin
·
Published
2018-06-08
·
Updated
2024-06-15
·
CVE-2018-5815
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
LibRaw versions prior to 0.18.12
Description
The issue is related to an integer overflow error within the
parse qt() function in the internal/dcraw common.cpp component of the LibRaw image processing library. This error can be exploited to trigger an infinite loop via a specially crafted Apple QuickTime file, potentially leading to a denial of service. The vulnerability can be exploited by a remote attacker.Recommendations
For versions prior to 0.18.12, update to version 0.18.12 or later to resolve the issue.
As a temporary workaround, consider avoiding the use of the
parse qt() function until a patch is available.Fix
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Libraw
Suse
Ubuntu