Fluid Attacks Database

Description

A buffer overflow vulnerability in LibRaw version < 20.0 LibRaw::GetNormalizedModel in src/metadata/normalize_model.cpp may lead to context-dependent arbitrary code execution.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	libraw	>=0 <0.20.2-1	0.20.2-1
debian 13	libraw	>=0 <0.20.2-1	0.20.2-1
debian 12	libraw	>=0 <0.20.2-1	0.20.2-1
debian 14	libraw	>=0 <0.20.2-1	0.20.2-1

Aliases

1. CVE-2020-248892. NVD-2020-248893. OSV-DEBIAN-2020-248894. OSV-2020-248895. SECURITY-TRACKER-CVE-2020-24889

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.