CVE-2020-35535

In LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF()" function (libraw\src\metadata\sony.cpp) when processing srf files.

Score

CVSS 3.1 5.5 Medium

Status

Modified - secalert@redhat.com

Published

2022-09-01

Last modified

2024-08-04

Weaknesses

CWE-125

Affected products

• Libraw (Libraw)

References

• https://github.com/LibRaw/LibRaw/commit/c243f4539233053466c1309bde606815351bee81
• https://github.com/LibRaw/LibRaw/issues/283