tocsin

Debian/libraw: high 8.1

A heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can

Action: Upgrade libraw to 0.20.2-2.1+deb12u2 or later.

Affected

introducedfixedlast affected
00.20.2-2.1+deb12u2-

Fixed versions

0.20.2-2.1+deb12u2

Sources

published · modified · JSON