Flexera Software LLC Libraw vulnerabilities

2 vulnerabilities

Known vulnerabilities in Flexera Software LLC Libraw, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2018-5817debianlibraw+10
EPSS score
2.50%
A type confusion error within the "unpacked_load_raw()" function within LibRaw versions prior to 0.19.1 (internal/dcraw_common.cpp) can be exploited to trigger an infinite loop.7.8CVE-2018-5819debianlibraw+10
EPSS score
2.93%
An error within the "parse_sinar_ia()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to exhaust available CPU resources.