logo

Database

Lack of data validation - Type confusion In libraw

Description

An error within the "parse_minolta()" function (dcraw/dcraw.c) in LibRaw versions prior to 0.18.11 can be exploited to trigger an infinite loop via a specially crafted file.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2018-58132. NVD-2018-58133. OSV-DEBIAN-2018-58134. OSV-2018-58135. SECURITY-TRACKER-CVE-2018-5813

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.