| Package | Affected versions | Patched versions |
|---|---|---|
| libraw | = 0.13.0= 0.13.1= 0.13.2= 0.13.3= 0.13.4= 0.13.5= 0.13.6= 0.13.7= 0.13.8= 0.14.0= 0.14.1= 0.14.2= 0.14.3= 0.14.4= 0.14.5= 0.14.6= 0.14.7= 0.15.0= 0.15.1= 0.15.2= 0.15.3 |
The "faster LJPEG decoder" in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a crafted photo file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free