CVE-2021-3624

There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code may be executed in the victim's system.

Score

CVSS 3.1 7.8 High

Status

Modified - secalert@redhat.com

Published

2022-04-18

Last modified

2024-08-03

Weaknesses

CWE-190, CWE-20

Affected products

• Dcraw (Dcraw Project)
• Debian Linux (Debian)

References

• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=984761