Libraw Demosaic Pack Gpl2 vulnerabilities

2 vulnerabilities

Known vulnerabilities in Libraw Demosaic Pack Gpl2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2017-6890librawlibraw-demosaic-pack-gpl2
EPSS score
1.48%
A boundary error within the "foveon_load_camf()" function (dcraw_foveon.c) when initializing a huffman table in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a stack-based buffer overflow.9.8CVE-2017-6889librawlibraw-demosaic-pack-gpl2
EPSS score
1.48%
An integer overflow error within the "foveon_load_camf()" function (dcraw_foveon.c) in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a heap-based buffer overflow.