Lack of data validation - Type confusion In libraw
Description
An error within the "parse_rollei()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 12 | 0.19.1-1 | ||
debian 13 | 0.19.1-1 | ||
debian 14 | 0.19.1-1 | ||
debian 11 | 0.19.1-1 | ||
 rpm rhel7 | 0:3.26.0-3.el7 | ||
rpm rhel7 | 0:3.28.3-10.el7 | ||
rpm rhel7 | 0:1.15.12-4.el7 | ||
rpm rhel7 | 0:2.10.11-8.el7 | ||
rpm rhel7 | 0:2.56.1-5.el7 | ||
rpm rhel7 | 0:3.26.3.1-6.el7 |
1-10 of 25
10
Aliases
1. 2. 3. 4. 5.