CVE-2018-19655

A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker…

published November 29, 2018

CVSS
—
EPSS
3%
Percentile
86.6
In the wild
Unconfirmed
What it is

A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02855 · 86.6th percentile
Published
2018-11-29T05:00Z
EPSS history
Timeline
  • 29 NOV 05:00Z
    A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker…
    cvelistv5