Fluid Attacks Database

Description

In LibRaw before 0.21.4, metadata/tiff.cpp has an out-of-bounds read in the Fujifilm 0xf00c tag parser.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 14	libraw	>=0 <0.21.4-1	0.21.4-1
debian 11	libraw	=0.20.2-1 \|\| =0.20.2-1+deb11u1 \|\| >=0 <0.20.2-1+deb11u2	0.20.2-1+deb11u2
debian 12	libraw	=0.20.2-2.1 \|\| >=0 <0.20.2-2.1+deb12u1	0.20.2-2.1+deb12u1
debian 13	libraw	>=0 <0.21.4-1	0.21.4-1
rpm rhel8	libraw1394	-	-
rpm rhel7	LibRaw	-	-
rpm rhel8	LibRaw	-	-
rpm rhel9	LibRaw	-	-
rpm rhel6	libraw1394	-	-
rpm rhel7	libraw1394	-	-

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.