tocsin

Debian/libraw: medium 5.5

In LibRaw, an out-of-bounds read vulnerability exists within the "simple_decode_row()" function (libraw\src\x3f\x3f_utils_patched.cpp) which can be triggered via an image with a large row_stride field

Action: Upgrade libraw to 0.20.0-4 or later.

Affected

introducedfixedlast affected
00.20.0-4-

Fixed versions

0.20.0-4

Sources

published · modified · JSON