PT-2023-36035 · Libraw · Libraw

Published

2023-02-21

·

Updated

2023-02-21

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions LibRaw (affected versions not specified)
Description The issue is related to a heap-buffer-overflow read. Technical details about the crash include the LibRaw buffer datastream::scanf one function, LibRaw::parse mos, and LibRaw::parse tiff ifd.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

OSV-2023-90

Affected Products

Libraw