Description
A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 12 | | =0.20.2-2.1 || =0.20.2-2.1+deb12u1 || =0.21.1-1 || =0.21.1-2 || =0.21.1-3 || =0.21.1-4 || =0.21.1-5 || =0.21.1-6 || =0.21.1-7 || =0.21.2-1 || =0.21.2-2 || =0.21.2-2.1 || =0.21.2-2.1~exp1 || =0.21.3-1 || =0.21.4-1 || =0.21.4-2 || =0.21.4-3~exp1 || =0.21.4-3~exp2 || =0.21.5b-1 || =0.22.0-1~exp1 || =0.22.1-1 || =0.22.1-1~exp1 || =0.22.1-1~exp2 | - |
 rpm rhel8 | | | 0:0.19.5-6.el8_10 |
rpm rhel9 | | | 0:0.21.1-2.el9_8 |
rpm rhel8 | | - | - |
debian 14 | | =0.21.4-2 || =0.21.4-3~exp1 || =0.21.4-3~exp2 || =0.21.5b-1 || =0.22.0-1~exp1 || =0.22.1-1~exp1 || =0.22.1-1~exp2 || >=0 <0.22.1-1 | 0.22.1-1 |
rpm rhel7 | | - | - |
rpm rhel7 | | - | - |
debian 11 | | =0.20.2-1 || =0.20.2-1+deb11u1 || =0.20.2-1+deb11u2 || =0.20.2-2 || =0.20.2-2.1 || =0.21.1-1 || =0.21.1-2 || =0.21.1-3 || =0.21.1-4 || =0.21.1-5 || =0.21.1-6 || =0.21.1-7 || =0.21.2-1 || =0.21.2-2 || =0.21.2-2.1 || =0.21.2-2.1~exp1 || =0.21.3-1 || =0.21.4-1 || =0.21.4-2 || =0.21.4-3~exp1 || =0.21.4-3~exp2 || =0.21.5b-1 || =0.22.0-1~exp1 || =0.22.1-1 || =0.22.1-1~exp1 || =0.22.1-1~exp2 | - |
debian 13 | | =0.21.4-2 || =0.21.4-3~exp1 || =0.21.4-3~exp2 || =0.21.5b-1 || =0.22.0-1~exp1 || =0.22.1-1 || =0.22.1-1~exp1 || =0.22.1-1~exp2 | - |
rpm rhel6 | | - | - |
