{"action":"Upgrade libkdcraw to 24.12.0-1 or later.","affected":[{"fixed":"24.12.0-1","introduced":"0"}],"component":"libkdcraw","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["24.12.0-1"],"id":"tcs_01M5NAA39DXGMMTMZQA8BW67FM","modified_at":"2026-09-01T20:03:12.899555752Z","published_at":"2014-01-19T18:02:56.600Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2013-1438","https://security-tracker.debian.org/tracker/CVE-2013-1438"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2013-1438#Debian:13/libkdcraw","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2013-1438"}],"summary":"Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, allows context-dependent attackers to cause a denial of service via a crafted photo file"}