Null Pointer Dereference Vulnerability in LibRaw Product by LibRaw
CVE-2020-24890

5.5MEDIUM

Key Information:

Vendor: Libraw
Status: Libraw
Vendor: CVE Published:; 16 September 2020

What is CVE-2020-24890?

LibRaw version 20.0 contains a null pointer dereference vulnerability in the parse_tiff_ifd function located in src/metadata/tiff.cpp. This flaw may lead to context-dependent arbitrary code execution under specific circumstances, particularly if the software is compiled with certain configurations. Users and administrators are advised to review their compilation settings and consider applying relevant security patches from the vendor.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch