CVE-2018-5818

An error within the "parse_rollei()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop.

Score

CVSS 3.0 7.5 High

Status

Modified - PSIRT-CNA@flexerasoftware.com

Published

2019-02-20

Last modified

2024-08-05

Weaknesses

CWE-835

Affected products

• Debian Linux (Debian)
• Libraw (Libraw)

References

• https://lists.debian.org/debian-lts-announce/2019/03/msg00036.html
• https://secuniaresearch.flexerasoftware.com/secunia_research/2018-27/
• https://usn.ubuntu.com/3989-1/
• https://www.libraw.org/news/libraw-0-19-2-release