PT-2021-3480 · Dcraw+2 · Dcraw+2

Wooseok Kang · Published 2021-05-31 · Updated 2024-06-15 · CVE-2021-3624

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions dcraw (affected versions not specified)

Description The issue is related to an integer overflow vulnerability. It occurs when a maliciously crafted X3F input image is processed, potentially allowing arbitrary code execution on the victim's system. The vulnerability exists due to insufficient input validation in the foveon load camf() function of the dcraw raw converter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Integer Overflow

Memory Corruption

Weakness Enumeration

CWE-20

CWE-190

CWE-787

Related Identifiers

BDU:2021-03491

CVE-2021-3624

MGASA-2022-0160

OPENSUSE-SU-2022_1277-1

OPENSUSE-SU-2024:11997-1

SUSE-SU-2022:1277-1

SUSE-SU-2022:1749-1

Affected Products

Debian

Suse

Dcraw

References · 44

• 🔥 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=984761 · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2022:1749-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-3624 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3624 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:11997-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1277-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3624 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-3624 · Security Note
• https://bdu.fstec.ru/vul/2021-03491 · Security Note
• https://advisories.mageia.org/MGASA-2022-0160.html · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-3624 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-3624 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2022-0160 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-3624 · Vendor Advisory
• https://suse.com/security/cve/CVE-2021-3624 · Note