Описание
In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp allows out-of-buffer access because split_col and split_row values are not checked in 0x041f tag processing.
A flaw was found in LibRaw. In affected versions of LibRaw, phase_one_correct in decoders/load_mfbacks.cpp allows out-of-buffer access because split_col and split_row values are not checked in 0x041f tag processing.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | libraw1394 | Fix deferred | ||
| Red Hat Enterprise Linux 7 | LibRaw | Fix deferred | ||
| Red Hat Enterprise Linux 7 | libraw1394 | Fix deferred | ||
| Red Hat Enterprise Linux 8 | LibRaw | Fix deferred | ||
| Red Hat Enterprise Linux 8 | libraw1394 | Fix deferred | ||
| Red Hat Enterprise Linux 9 | LibRaw | Fix deferred |
Показывать по
Дополнительная информация
Статус:
2.9 Low
CVSS3
Связанные уязвимости
In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp allows out-of-buffer access because split_col and split_row values are not checked in 0x041f tag processing.
In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp allows out-of-buffer access because split_col and split_row values are not checked in 0x041f tag processing.
In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cp ...
In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp allows out-of-buffer access because split_col and split_row values are not checked in 0x041f tag processing.
Уязвимость функции phase_one_correct() компонента decoders/load_mfbacks.cpp библиотеки для обработки изображений LibRaw, позволяющая нарушителю выполнить произвольный код
2.9 Low
CVSS3