PT-2023-35704 · Libraw · Libraw

Published

2023-03-17

·

Updated

2023-03-17

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions LibRaw (affected versions not specified)
Description The issue is related to a crash in LibRaw, specifically in the LibRaw::sget4 function, which is called by LibRaw::parseAdobeRAFMakernote and LibRaw::parse tiff ifd. The crash type is reported as UNKNOWN READ.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

OSV-2023-184

Affected Products

Libraw