Buffer Overflow Vulnerability in LibRaw Affects Various Linux/Unix Distributions
CVE-2021-32142

7.8HIGH

Key Information:

Vendor

Libraw

Status
Libraw
Vendor
CVE Published:
17 February 2023

What is CVE-2021-32142?

A buffer overflow vulnerability exists in LibRaw version 0.20.0, which can allow an attacker to escalate privileges through the LibRaw_buffer_datastream::gets function in libraw_datastream.cpp. Exploiting this vulnerability may lead to unauthorized access to sensitive system resources or data manipulation. Users are strongly advised to upgrade to a patched version to mitigate potential risks.

References

https://github.com/LibRaw/LibRaw/issues/400
https://github.com/LibRaw/LibRaw/commit/bc3aaf4223fdb70d5...
https://github.com/gtt1995

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.