Search CVE reports

1 – 10 of 60 results

Detailed view

Sort by:

CVE-2024-35186

Medium priority

Needs evaluation

gitoxide is a pure Rust implementation of Git. During checkout, `gix-worktree-state` does not verify that paths point to locations in the working tree. A specially crafted repository can, when cloned, place new files anywhere...

3 affected packages

rust-gix-fs, rust-gix-index, rust-gix-worktree

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
rust-gix-fs	Needs evaluation	Not in release	Not in release	—	—
rust-gix-index	Not in release	Not in release	Not in release	—	—
rust-gix-worktree	Not in release	Not in release	Not in release	—	—

CVE-2020-22628

Medium priority

Some fixes available 1 of 53

Buffer Overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspect_ratio.cpp.

9 affected packages

darktable, dcraw, digikam, exactimage, kodi...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
darktable	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
dcraw	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
digikam	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
exactimage	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
kodi	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
libraw	Not affected	Not affected	Fixed	Needs evaluation	Needs evaluation
rawtherapee	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
ufraw	Not in release	Not in release	Not in release	Needs evaluation	Needs evaluation
xbmc	Not in release	Not in release	Not in release	Not in release	Not in release

CVE-2023-1729

Medium priority

Some fixes available 7 of 65

A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.

9 affected packages

darktable, dcraw, digikam, exactimage, kodi...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
darktable	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
dcraw	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
digikam	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
exactimage	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
kodi	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
libraw	Fixed	Fixed	Fixed	Needs evaluation	Needs evaluation
rawtherapee	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
ufraw	Not in release	Not in release	Not in release	Needs evaluation	Needs evaluation
xbmc	Not in release	Not in release	Not in release	Not in release	Not in release

CVE-2021-45985

Medium priority

Needs evaluation

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read.

9 affected packages

darktable, lua5.1, lua5.2, lua5.3, lua5.4...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
darktable	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
lua5.1	Not affected	Not affected	Not affected	Not affected	Not affected
lua5.2	Not affected	Not affected	Not affected	Not affected	Not affected
lua5.3	Not affected	Not affected	Not affected	Not affected	Not affected
lua5.4	Not affected	Not affected	Not in release	Not in release	Not in release
lua50	Not in release	Not in release	Not affected	Not affected	Not affected
memcached	Not affected	Not affected	Not affected	Not affected	Not affected
tup	Needs evaluation	Needs evaluation	Needs evaluation	Not in release	Ignored
vifm	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2021-32142

Low priority

Some fixes available 7 of 65

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.

9 affected packages

darktable, dcraw, digikam, exactimage, kodi...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
darktable	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
dcraw	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
digikam	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
exactimage	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
kodi	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
libraw	Fixed	Fixed	Fixed	Vulnerable	Needs evaluation
rawtherapee	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
ufraw	—	Not in release	Not in release	Needs evaluation	Needs evaluation
xbmc	—	Not in release	Not in release	Not in release	Not in release

CVE-2020-35535

Medium priority

Needs evaluation

In LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF()" function (libraw\src\metadata\sony.cpp) when processing srf files.

9 affected packages

darktable, dcraw, digikam, exactimage, kodi...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
darktable	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
dcraw	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
digikam	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
exactimage	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
kodi	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
libraw	Not affected	Not affected	Not affected	Not affected	Not affected
rawtherapee	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
ufraw	Not in release	Not in release	Not in release	Needs evaluation	Needs evaluation
xbmc	Not in release	Not in release	Not in release	Not in release	Not in release

CVE-2020-35534

Medium priority

Needs evaluation

In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function (libraw\src\decoders\crx.cpp) when processing cr3 files.

9 affected packages

darktable, dcraw, digikam, exactimage, kodi...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
darktable	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
dcraw	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
digikam	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
exactimage	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
kodi	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
libraw	Not affected	Not affected	Not affected	Not affected	Not affected
rawtherapee	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
ufraw	Not in release	Not in release	Not in release	Needs evaluation	Needs evaluation
xbmc	Not in release	Not in release	Not in release	Not in release	Not in release

CVE-2020-35533

Medium priority

Some fixes available 2 of 59

In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobe_copy_pixel()" function (libraw\src\decoders\dng.cpp) when reading data from the image file.

9 affected packages

darktable, dcraw, digikam, exactimage, kodi...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
darktable	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
dcraw	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
digikam	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
exactimage	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
kodi	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
libraw	Not affected	Not affected	Fixed	Fixed	Needs evaluation
rawtherapee	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
ufraw	Not in release	Not in release	Not in release	Needs evaluation	Needs evaluation
xbmc	Not in release	Not in release	Not in release	Not in release	Not in release

CVE-2020-35532

Medium priority

Some fixes available 2 of 59

In LibRaw, an out-of-bounds read vulnerability exists within the "simple_decode_row()" function (libraw\src\x3f\x3f_utils_patched.cpp) which can be triggered via an image with a large row_stride field.

9 affected packages

darktable, dcraw, digikam, exactimage, kodi...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
darktable	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
dcraw	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
digikam	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
exactimage	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
kodi	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
libraw	Not affected	Not affected	Fixed	Fixed	Needs evaluation
rawtherapee	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
ufraw	Not in release	Not in release	Not in release	Needs evaluation	Needs evaluation
xbmc	Not in release	Not in release	Not in release	Not in release	Not in release

CVE-2020-35531

Medium priority

Some fixes available 2 of 59

In LibRaw, an out-of-bounds read vulnerability exists within the get_huffman_diff() function (libraw\src\x3f\x3f_utils_patched.cpp) when reading data from an image file.

9 affected packages

darktable, dcraw, digikam, exactimage, kodi...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
darktable	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
dcraw	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
digikam	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
exactimage	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
kodi	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
libraw	Not affected	Not affected	Fixed	Fixed	Needs evaluation
rawtherapee	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
ufraw	Not in release	Not in release	Not in release	Needs evaluation	Needs evaluation
xbmc	Not in release	Not in release	Not in release	Not in release	Not in release

Export to JSON

Results by page: