ID CVE-2020-35530
Summary In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patched.cpp) that can be triggered via a crafted X3F file.
References
Vulnerable Configurations
  • cpe:2.3:a:libraw:libraw:0.20.1:*:*:*:*:*:*:*
    cpe:2.3:a:libraw:libraw:0.20.1:*:*:*:*:*:*:*
  • cpe:2.3:a:libraw:libraw:0.21.0:beta1:*:*:*:*:*:*
    cpe:2.3:a:libraw:libraw:0.21.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:libraw:libraw:0.20.2:*:*:*:*:*:*:*
    cpe:2.3:a:libraw:libraw:0.20.2:*:*:*:*:*:*:*
  • cpe:2.3:a:libraw:libraw:0.20.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:libraw:libraw:0.20.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:libraw:libraw:0.20.0:-:*:*:*:*:*:*
    cpe:2.3:a:libraw:libraw:0.20.0:-:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
CVSS
Base: None
Impact:
Exploitability:
CWE CWE-787
CAPEC
Access
VectorComplexityAuthentication
Impact
ConfidentialityIntegrityAvailability
Last major update 29-09-2022 - 16:33
Published 01-09-2022 - 18:15
Last modified 29-09-2022 - 16:33
Back to Top