Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-6887

A boundary error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to cause a memory corruption via e.g. a specia

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
flexera

Description

A boundary error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to cause a memory corruption via e.g. a specially crafted KDC file with model set to "DSLR-A100" and containing multiple sequences of 0x100 and 0x14A TAGs.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

LibRaw LibRaw

  • 0.x prior to 0.18.2affected

References