CVE-2017-6889

CRITICAL 9.8CVE-2017-6889 · Published 15/05/2017 · updated 17/06/2026

In short

CVE-2017-6889 is a CRITICAL (CVSS 9.8) vulnerability affecting libraw-demosaic-pack-gpl2 (libraw).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 73.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
libraw-demosaic-pack-gpl2 libraw	`≤ 0.18.1`	No fix yet

Description

An integer overflow error within the "foveon_load_camf()" function (dcraw_foveon.c) in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a heap-based buffer overflow.

References

LibRaw/LibRaw-demosaic-pack-GPL2 commit 194f592 · Patch
secuniaresearch.flexerasoftware.com/advisories/75000 · Permissions Required

More vulnerabilities in libraw-demosaic-pack-gpl2

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free