UBUNTU-CVE-2015-8366

Advisory lineage Upstream: 1 Downstream: 1

Upstream

CVE-2015-8366

Downstream

USN-3492-1

Published: 02 Dec 2015, 00:00

Last modified:04 Feb 2026, 04:34

Vulnerability Summary

Overall Risk (default)

high

70/100

CVSS Score

9.8 CRITICAL

3.1 (osv_ubuntu)

EPSS Score

No data

KEV

Not listed

Ransomware

No reports

Public exploits

None found

Dark Web

Not detected

Timeline

02 Dec 2015, 00:00

Published

Vulnerability first disclosed

04 Feb 2026, 04:34

Last Modified

Vulnerability information updated

Description

Array index error in smal_decode_segment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes.

CVSS Metrics

v3.1•CRITICAL•Score: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Systems

ubuntu•darktable
all | all | all | all | all | all
ubuntu•dcraw
all | all
ubuntu•exactimage
all | all | all | all | all | all
ubuntu•kodi
all | all | all | all | all | all
ubuntu•libraw
< 0.15.4-1ubuntu0.1
ubuntu•rawtherapee
all | all | all | all | all | all
ubuntu•ufraw
all