UBUNTU-CVE-2018-20337

Advisory lineage Upstream: 1 Downstream: 1

Upstream

CVE-2018-20337

Downstream

USN-3989-1

Published: 21 Dec 2018, 00:00

Last modified:04 Feb 2026, 04:37

Vulnerability Summary

Overall Risk (default)

medium

35/100

CVSS Score

8.8 HIGH

3.0 (osv_ubuntu)

EPSS Score

No data

KEV

Not listed

Ransomware

No reports

Public exploits

None found

Dark Web

Not detected

Timeline

21 Dec 2018, 00:00

Published

Vulnerability first disclosed

04 Feb 2026, 04:37

Last Modified

Vulnerability information updated

Description

There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact.

CVSS Metrics

v3.0•HIGH•Score: 8.8CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Systems

ubuntu•darktable
all | all | all | all | all | all
ubuntu•dcraw
all | all | all | all | all | all
ubuntu•exactimage
all | all | all | all | all | all
ubuntu•kodi
all | all | all | all | all | all
ubuntu•libraw
< 0.18.8-1ubuntu0.3
ubuntu•rawtherapee
all | all | all | all | all | all
ubuntu•ufraw
all | all