CVE-2018-20337

There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1

published December 21, 2018

CVSS
—
EPSS
2%
Percentile
81.9
In the wild
Unconfirmed
What it is

There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02145 · 81.9th percentile
Published
2018-12-21T09:00Z
EPSS history
Timeline
  • 21 DEC 09:00Z
    There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1
    cvelistv5