Heap-based Buffer Overflow in LibRaw Product from LibRaw
CVE-2017-14348

8.8HIGH

Key Information:

Vendor

Libraw

Status
Libraw
Vendor
CVE Published:
12 September 2017

What is CVE-2017-14348?

LibRaw versions prior to 0.18.4 are susceptible to a heap-based buffer overflow vulnerability within the processCanonCameraInfo function. This occurs when processing a specially crafted file, which could allow an attacker to cause unintended behavior in the software, potentially leading to crashes or arbitrary code execution. Proper validation and sanitization of input data are crucial to mitigating the risks associated with this vulnerability.

References

https://github.com/LibRaw/LibRaw/issues/100
x_refsource_CONFIRM
http://www.securityfocus.com/bid/100866
vdb-entryx_refsource_BID

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.