CVE-2017-16910

An error within the "LibRaw::xtrans_interpolate()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read memory access and subsequently a Denial of Service condition.

Score

CVSS 3.0 6.5 Medium

Status

Modified - PSIRT-CNA@flexerasoftware.com

Published

2018-12-07

Last modified

2024-08-05

Weaknesses

CWE-125

Affected products

• Ubuntu Linux (Canonical)
• Libraw (Libraw)

References

• https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt
• https://github.com/LibRaw/LibRaw/commit/5563e6ddc3f7cb93d98b491194ceebdee7288d36
• https://secuniaresearch.flexerasoftware.com/advisories/76000/
• https://secuniaresearch.flexerasoftware.com/secunia_research/2017-19/
• https://usn.ubuntu.com/3615-1/