PT-2020-15849 · Libraw+1 · Libraw+1

Lxumeio · Published 2020-09-16 · Updated 2022-12-06 · CVE-2020-24889

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 20.0

Description A buffer overflow issue in the GetNormalizedModel function within src/metadata/normalize model.cpp may lead to arbitrary code execution, depending on the context.

Recommendations For versions prior to 20.0, update to version 20.0 or later to resolve the issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

ALT-PU-2020-3199

CVE-2020-24889

Affected Products

Alt Linux

Libraw

References · 9

• 🔥 https://github.com/LibRaw/LibRaw/issues/334 · Exploit
• https://ubuntu.com/security/CVE-2020-24889 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-24889 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-24889 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-24889 · Vendor Advisory
• https://security.gentoo.org/glsa/202010-05 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-24889 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-24889 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-24889 · Vendor Advisory