CVE-2020-24890

libraw 20.0 has a null pointer dereference vulnerability in parse_tiff_ifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code…

published September 16, 2020

CVSS
—
EPSS
2%
Percentile
75.1
In the wild
Unconfirmed
What it is

libraw 20.0 has a null pointer dereference vulnerability in parse_tiff_ifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code execution. Note: this vulnerability occurs only if you compile the software in a certain way

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01561 · 75.1th percentile
Published
2020-09-16T14:39Z
EPSS history
Timeline
  • 16 SEP 14:39Z
    libraw 20.0 has a null pointer dereference vulnerability in parse_tiff_ifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code…
    cvelistv5