CVE-2023-1729

概要

参考情報

• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• LibRaw/LibRaw · Exploit
• lists.debian.org/debian-lts-announce/2023/05/msg00025.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AGZ6XF5WTPJ4GLXQ62JVRDZSVSJHXNQU · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E5ZJ3UBTJBZHNPJQFOSGM5L7WAHHE2GY · Mailing List
• security.gentoo.org/glsa/202312-08 · Third Party Advisory
• debian.org/security/2023/dsa-5412 · Third Party Advisory

libraw のその他の脆弱性

• CVE-2026-24660高 8.1A heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw Commit d20315b. A specially crafted malici…
• CVE-2026-24450緊急 9.8An integer overflow vulnerability exists in the uncompressed_fp_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted mal…
• CVE-2026-21413緊急 9.8A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b. A…
• CVE-2026-20911緊急 9.8A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw Commit 0b56545 and Commit d20315b. A spe…
• CVE-2026-20889緊急 9.8A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d20315b. A specially crafted malici…