Search CVE reports

1 – 10 of 54 results

Detailed view

Sort by:

CVE-2020-22628

Medium priority

Some fixes available 2 of 58

Buffer Overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspect_ratio.cpp.

9 affected packages

xbmc, libraw, ufraw, darktable, exactimage...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
xbmc	Not in release	Not in release	Not in release	Not in release
libraw	Not affected	Not affected	Fixed	Needs evaluation
ufraw	Not in release	Not in release	Not in release	Needs evaluation
darktable	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
exactimage	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
dcraw	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
rawtherapee	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
kodi	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
digikam	Not affected	Not affected	Fixed	Not affected

CVE-2023-1729

Medium priority

Some fixes available 12 of 74

A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.

9 affected packages

ufraw, xbmc, darktable, exactimage, libraw...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
ufraw	Not in release	Not in release	Not in release	Needs evaluation
xbmc	Not in release	Not in release	Not in release	Not in release
darktable	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
exactimage	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
libraw	Fixed	Fixed	Fixed	Needs evaluation
dcraw	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
digikam	Not affected	Fixed	Fixed	Fixed
kodi	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
rawtherapee	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2021-32142

Low priority

Some fixes available 10 of 72

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.

9 affected packages

darktable, dcraw, digikam, exactimage, kodi...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
darktable	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
dcraw	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
digikam	Not affected	Not affected	Fixed	Not affected
exactimage	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
kodi	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
libraw	Fixed	Fixed	Fixed	Vulnerable
rawtherapee	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
ufraw	—	Not in release	Not in release	Needs evaluation
xbmc	—	Not in release	Not in release	Not in release

CVE-2020-35535

Medium priority

Needs evaluation

In LibRaw, there is an out-of-bounds read vulnerability within the “LibRaw::parseSonySRF()” function (libraw\src\metadata\sony.cpp) when processing srf files.

9 affected packages

darktable, dcraw, digikam, exactimage, kodi...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
darktable	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
dcraw	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
digikam	Not affected	Not affected	Not affected	Not affected
exactimage	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
kodi	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
rawtherapee	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
xbmc	Not in release	Not in release	Not in release	Not in release
libraw	Not affected	Not affected	Not affected	Not affected
ufraw	Not in release	Not in release	Not in release	Needs evaluation

CVE-2020-35534

Medium priority

Needs evaluation

In LibRaw, there is a memory corruption vulnerability within the “crxFreeSubbandData()” function (libraw\src\decoders\crx.cpp) when processing cr3 files.

9 affected packages

darktable, dcraw, digikam, exactimage, kodi...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
darktable	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
dcraw	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
digikam	Not affected	Not affected	Not affected	Not affected
exactimage	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
kodi	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
rawtherapee	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
xbmc	Not in release	Not in release	Not in release	Not in release
libraw	Not affected	Not affected	Not affected	Not affected
ufraw	Not in release	Not in release	Not in release	Needs evaluation

CVE-2020-35533

Medium priority

Some fixes available 4 of 65

In LibRaw, an out-of-bounds read vulnerability exists within the “LibRaw::adobe_copy_pixel()” function (libraw\src\decoders\dng.cpp) when reading data from the image file.

9 affected packages

darktable, dcraw, digikam, exactimage, kodi...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
darktable	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
dcraw	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
digikam	Not affected	Not affected	Fixed	Fixed
exactimage	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
kodi	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
rawtherapee	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
ufraw	Not in release	Not in release	Not in release	Needs evaluation
libraw	Not affected	Not affected	Fixed	Fixed
xbmc	Not in release	Not in release	Not in release	Not in release

CVE-2020-35532

Medium priority

Some fixes available 4 of 65

In LibRaw, an out-of-bounds read vulnerability exists within the “simple_decode_row()” function (libraw\src\x3f\x3f_utils_patched.cpp) which can be triggered via an image with a large row_stride field.

9 affected packages

darktable, dcraw, digikam, exactimage, kodi...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
darktable	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
dcraw	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
digikam	Not affected	Not affected	Fixed	Fixed
exactimage	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
kodi	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
rawtherapee	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
ufraw	Not in release	Not in release	Not in release	Needs evaluation
libraw	Not affected	Not affected	Fixed	Fixed
xbmc	Not in release	Not in release	Not in release	Not in release

CVE-2020-35531

Medium priority

Some fixes available 4 of 65

In LibRaw, an out-of-bounds read vulnerability exists within the get_huffman_diff() function (libraw\src\x3f\x3f_utils_patched.cpp) when reading data from an image file.

9 affected packages

darktable, dcraw, digikam, exactimage, kodi...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
darktable	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
dcraw	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
digikam	Not affected	Not affected	Fixed	Fixed
exactimage	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
kodi	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
rawtherapee	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
ufraw	Not in release	Not in release	Not in release	Needs evaluation
libraw	Not affected	Not affected	Fixed	Fixed
xbmc	Not in release	Not in release	Not in release	Not in release

CVE-2020-35530

Medium priority

Some fixes available 4 of 65

In LibRaw, there is an out-of-bounds write vulnerability within the “new_node()” function (libraw\src\x3f\x3f_utils_patched.cpp) that can be triggered via a crafted X3F file.

9 affected packages

darktable, dcraw, digikam, exactimage, kodi...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
darktable	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
dcraw	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
digikam	Not affected	Not affected	Fixed	Fixed
exactimage	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
kodi	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
rawtherapee	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
libraw	Not affected	Not affected	Fixed	Fixed
ufraw	Not in release	Not in release	Not in release	Needs evaluation
xbmc	Not in release	Not in release	Not in release	Not in release

CVE-2020-19858

Medium priority

Some fixes available 1 of 17

Platinum Upnp SDK through 1.2.0 has a directory traversal vulnerability. The attack could remote attack victim by sending http://ip:port/../privacy.avi URL to compromise a victim’s privacy.

3 affected packages

digikam, kodi, xbmc

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
digikam	Not affected	Not affected	Fixed	Not affected
kodi	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
xbmc	—	—	—	—

Export to JSON

Results by page: