CVE-2018-19565

概要

参考情報

• seclists.org/oss-sec/2018/q4/165 · Mailing List
• seclists.org/oss-sec/2018/q4/171 · Mailing List

dcraw のその他の脆弱性

• CVE-2021-3624高 7.8There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code m…
• CVE-2018-19655高 8.8A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow …
• CVE-2018-19568中 5.5A floating point exception in kodak_radc_load_raw in dcraw through 9.28 could be used by attackers able to supply malicious files to crash a…
• CVE-2018-19567中 5.5A floating point exception in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an app…
• CVE-2018-19566高 7.1A heap buffer over-read in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an applic…