Buffer Overflow Vulnerability in LibRaw Affects Multiple Applications
CVE-2020-24889

7.8HIGH

Key Information:

Vendor

Libraw

Status
Libraw
Vendor
CVE Published:
16 September 2020

What is CVE-2020-24889?

A buffer overflow vulnerability exists in LibRaw versions prior to 20.0, specifically within the LibRaw::GetNormalizedModel function found in src/metadata/normalize_model.cpp. Exploitation of this vulnerability could allow an attacker to trigger context-dependent arbitrary code execution, potentially leading to unauthorized control over the affected system. Users are urged to review the security implications and update their installations accordingly.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/LibRaw/LibRaw/issues/334
x_refsource_MISC
https://security.gentoo.org/glsa/202010-05
vendor-advisoryx_refsource_GENTOO

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.