| Package | Affected versions | Patched versions |
|---|---|---|
| libraw | = 0.15.0≤ 0.15.1 |
Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed full-color (1) Foveon or (2) sRAW image file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free