Infinite Loop Vulnerability in LibRaw Affects Multiple Versions
CVE-2018-5818

7.5HIGH

Key Information:

Vendor: Libraw
Status: Libraw
Vendor: CVE Published:; 20 February 2019

What is CVE-2018-5818?

A vulnerability exists in the parse_rollei() function of LibRaw, which allows attackers to exploit the flaw and potentially cause the application to enter an infinite loop. This issue affects all versions of LibRaw prior to 0.19.1, potentially leading to performance degradation and denial of service due to the inability to recover from the loop. Users are advised to update to the latest version to mitigate this risk.