[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2018-19565":6},{"stargazers_count":4,"fetched_at":5},5,"2026-04-08T20:11:31.826Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":23,"aliases":24,"duplicate_of":9,"upstream":25,"downstream":26,"duplicates":35,"related":36,"reserved_at":9,"published_at":41,"modified_at":42,"state":43,"summary":44,"references_raw":53,"kevs":66,"epss":67,"epss_history":70,"metrics":330,"affected":341},"CVE-2018-19565","A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","weakness","Draft","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-540","Overread Buffers",[],[],[],[],[27,29,31,33],{"_key":28},"UBUNTU-CVE-2018-19565",{"_key":30},"DEBIAN-CVE-2018-19565",{"_key":32},"SUSE-SU-2022:1749-1",{"_key":34},"SUSE-SU-2022:1277-1",[],[37,39,40],{"_key":38},"MGASA-2022-0160",{"_key":32},{"_key":34},"2018-11-26T20:00:00.000Z","2024-09-16T16:38:32.280Z","Modified",{"cisa_kev":45,"cisa_ransomware":45,"cisa_vendor":9,"epss_severity":46,"epss_score":47,"severity":48,"severity_score":49,"severity_version":50,"severity_source":51,"severity_vector":52,"severity_status":43},false,"low",0.00297,"high",7.1,"v3.0","nvd","CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",[54,62],{"url":55,"sources":56,"tags":58},"https://seclists.org/oss-sec/2018/q4/165",[57,51],"cve.org",[59,60,61],"X Refsource MISC","Mailing List","Third Party Advisory",{"url":63,"sources":64,"tags":65},"https://seclists.org/oss-sec/2018/q4/171",[57,51],[59,60,61],[],{"date":68,"score":47,"percentile":69},"2026-04-08",0.53012,[71,75,78,81,84,87,89,92,95,98,101,104,107,110,113,117,120,123,125,128,131,134,137,140,143,146,149,152,155,158,161,164,167,170,173,175,178,181,184,187,190,193,195,198,201,204,207,210,213,216,219,221,224,227,230,233,236,239,242,245,248,251,254,257,260,263,265,268,271,273,276,278,281,284,286,289,291,293,295,298,301,304,307,310,313,316,319,322,324,327],{"date":72,"score":73,"percentile":74},"2025-11-04",0.0031,0.53681,{"date":76,"score":73,"percentile":77},"2025-11-05",0.53643,{"date":79,"score":73,"percentile":80},"2025-11-06",0.53658,{"date":82,"score":73,"percentile":83},"2025-11-07",0.53683,{"date":85,"score":73,"percentile":86},"2025-11-08",0.53685,{"date":88,"score":73,"percentile":83},"2025-11-09",{"date":90,"score":73,"percentile":91},"2025-11-10",0.53657,{"date":93,"score":73,"percentile":94},"2025-11-11",0.5367,{"date":96,"score":73,"percentile":97},"2025-11-12",0.53698,{"date":99,"score":73,"percentile":100},"2025-11-13",0.53707,{"date":102,"score":73,"percentile":103},"2025-11-14",0.53708,{"date":105,"score":73,"percentile":106},"2025-11-15",0.53704,{"date":108,"score":73,"percentile":109},"2025-11-16",0.53684,{"date":111,"score":73,"percentile":112},"2025-11-17",0.53667,{"date":114,"score":115,"percentile":116},"2025-11-18",0.00201,0.37774,{"date":118,"score":115,"percentile":119},"2025-11-19",0.37784,{"date":121,"score":115,"percentile":122},"2025-11-20",0.37776,{"date":124,"score":73,"percentile":109},"2025-11-21",{"date":126,"score":73,"percentile":127},"2025-11-22",0.53682,{"date":129,"score":73,"percentile":130},"2025-11-23",0.53642,{"date":132,"score":73,"percentile":133},"2025-11-24",0.53634,{"date":135,"score":73,"percentile":136},"2025-11-25",0.53641,{"date":138,"score":73,"percentile":139},"2025-11-26",0.53644,{"date":141,"score":73,"percentile":142},"2025-11-27",0.53648,{"date":144,"score":73,"percentile":145},"2025-11-28",0.53622,{"date":147,"score":73,"percentile":148},"2025-11-29",0.53605,{"date":150,"score":73,"percentile":151},"2025-11-30",0.53599,{"date":153,"score":73,"percentile":154},"2025-12-01",0.53748,{"date":156,"score":73,"percentile":157},"2025-12-02",0.53764,{"date":159,"score":73,"percentile":160},"2025-12-03",0.53761,{"date":162,"score":73,"percentile":163},"2025-12-04",0.53608,{"date":165,"score":73,"percentile":166},"2025-12-05",0.53627,{"date":168,"score":73,"percentile":169},"2025-12-06",0.53626,{"date":171,"score":73,"percentile":172},"2025-12-07",0.53615,{"date":174,"score":73,"percentile":172},"2025-12-08",{"date":176,"score":73,"percentile":177},"2025-12-09",0.5363,{"date":179,"score":73,"percentile":180},"2025-12-10",0.53689,{"date":182,"score":73,"percentile":183},"2025-12-11",0.53711,{"date":185,"score":73,"percentile":186},"2025-12-12",0.53737,{"date":188,"score":73,"percentile":189},"2025-12-13",0.53734,{"date":191,"score":73,"percentile":192},"2025-12-14",0.53723,{"date":194,"score":73,"percentile":183},"2025-12-15",{"date":196,"score":73,"percentile":197},"2025-12-16",0.53725,{"date":199,"score":73,"percentile":200},"2025-12-17",0.53746,{"date":202,"score":73,"percentile":203},"2025-12-18",0.53784,{"date":205,"score":73,"percentile":206},"2025-12-19",0.53786,{"date":208,"score":73,"percentile":209},"2025-12-20",0.53775,{"date":211,"score":73,"percentile":212},"2025-12-21",0.53755,{"date":214,"score":73,"percentile":215},"2025-12-22",0.53733,{"date":217,"score":73,"percentile":218},"2025-12-23",0.53735,{"date":220,"score":73,"percentile":200},"2025-12-24",{"date":222,"score":73,"percentile":223},"2025-12-25",0.53793,{"date":225,"score":73,"percentile":226},"2025-12-26",0.53787,{"date":228,"score":73,"percentile":229},"2025-12-27",0.53834,{"date":231,"score":73,"percentile":232},"2025-12-28",0.53765,{"date":234,"score":73,"percentile":235},"2025-12-29",0.53747,{"date":237,"score":73,"percentile":238},"2025-12-30",0.53739,{"date":240,"score":73,"percentile":241},"2025-12-31",0.53756,{"date":243,"score":73,"percentile":244},"2026-01-01",0.53921,{"date":246,"score":73,"percentile":247},"2026-01-02",0.539,{"date":249,"score":73,"percentile":250},"2026-01-03",0.53893,{"date":252,"score":73,"percentile":253},"2026-01-04",0.53728,{"date":255,"score":73,"percentile":256},"2026-01-05",0.53713,{"date":258,"score":73,"percentile":259},"2026-01-06",0.53719,{"date":261,"score":73,"percentile":262},"2026-01-07",0.53743,{"date":264,"score":73,"percentile":232},"2026-01-08",{"date":266,"score":73,"percentile":267},"2026-01-09",0.53759,{"date":269,"score":73,"percentile":270},"2026-01-10",0.53758,{"date":272,"score":73,"percentile":238},"2026-01-11",{"date":274,"score":73,"percentile":275},"2026-01-12",0.53691,{"date":277,"score":73,"percentile":94},"2026-01-13",{"date":279,"score":73,"percentile":280},"2026-01-14",0.53712,{"date":282,"score":73,"percentile":283},"2026-01-15",0.53715,{"date":285,"score":73,"percentile":186},"2026-01-16",{"date":287,"score":73,"percentile":288},"2026-01-17",0.53724,{"date":290,"score":73,"percentile":280},"2026-01-18",{"date":292,"score":73,"percentile":106},"2026-01-19",{"date":294,"score":73,"percentile":103},"2026-01-20",{"date":296,"score":73,"percentile":297},"2026-01-21",0.53714,{"date":299,"score":47,"percentile":300},"2026-01-22",0.52612,{"date":302,"score":47,"percentile":303},"2026-01-23",0.52658,{"date":305,"score":47,"percentile":306},"2026-01-24",0.52666,{"date":308,"score":47,"percentile":309},"2026-01-25",0.52621,{"date":311,"score":47,"percentile":312},"2026-01-26",0.52602,{"date":314,"score":47,"percentile":315},"2026-01-27",0.5261,{"date":317,"score":47,"percentile":318},"2026-01-28",0.52622,{"date":320,"score":47,"percentile":321},"2026-01-29",0.5262,{"date":323,"score":47,"percentile":309},"2026-01-30",{"date":325,"score":47,"percentile":326},"2026-01-31",0.52626,{"date":328,"score":47,"percentile":329},"2026-02-01",0.52761,[331],{"source":51,"cvss_v2_0":332,"cvss_v3_0":337,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":333,"baseSeverity":9,"vectorString":334,"impactScore":335,"exploitabilityScore":336},5.8,"AV:N/AC:M/Au:N/C:P/I:N/A:P",4.9,8.6,{"baseScore":49,"baseSeverity":338,"vectorString":52,"impactScore":339,"exploitabilityScore":340},"HIGH",8.7,4.6,[342],{"ecosystem":9,"name":343,"vendor":344,"product":343,"cpe_part":345,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":346},"dcraw","dcraw_project","a",[347],{"version":348,"is_range":349,"range_type":350,"version_start":9,"version_start_type":9,"version_end":351,"version_end_type":352,"fixed_in":9},"lte9.28",true,"cpe","9.28","including"]