LibRaw: Out-of-bounds read in simple_decode_row() function
Published Sep 1, 2022
5.5
MEDIUMCVSS 3.1
EPSS 0.39%
Description
In LibRaw, an out-of-bounds read vulnerability exists within the "simple_decode_row()" function (libraw\src\x3f\x3f_utils_patched.cpp) which can be triggered via an image with a large row_stride field.
Affected products
- Vendor n/a Product LibRaw Defaultn/a
- Version LibRaw 0.21-Beta1, LibRaw 0.20.2, LibRaw 0.20.1, LibRaw 0.20.0, LibRaw 0.20-RC2StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | LibRaw | n/a |
|
No data.
Red Hat Enterprise Linux 6
libraw1394
Out of support scope
Red Hat Enterprise Linux 7
LibRaw
Out of support scope
Red Hat Enterprise Linux 7
libraw1394
Out of support scope
Red Hat Enterprise Linux 8
LibRaw
Not affected
Red Hat Enterprise Linux 8
libraw1394
Not affected
Red Hat Enterprise Linux 8
libreoffice:flatpak/libraw1394
Not affected
Red Hat Enterprise Linux 9
LibRaw
Not affected
Red Hat Enterprise Linux 9
libreoffice:flatpak/libraw1394
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 6 | libraw1394 | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | LibRaw | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | libraw1394 | Out of support scope | n/a |
| Red Hat Enterprise Linux 8 | LibRaw | Not affected | n/a |
| Red Hat Enterprise Linux 8 | libraw1394 | Not affected | n/a |
| Red Hat Enterprise Linux 8 | libreoffice:flatpak/libraw1394 | Not affected | n/a |
| Red Hat Enterprise Linux 9 | LibRaw | Not affected | n/a |
| Red Hat Enterprise Linux 9 | libreoffice:flatpak/libraw1394 | Not affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (7)
- https://access.redhat.com/security/cve/CVE-2020-35532 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2122357 Issue Tracking
- https://github.com/LibRaw/LibRaw/commit/5ab45b085898e379fedc6b113e2e82a890602b1e x_refsource_MISCPatchThird Party Advisory
- https://github.com/LibRaw/LibRaw/issues/271 x_refsource_MISCExploitIssue TrackingPatchThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/09/msg00024.html mailing-listx_refsource_MLISTMailing ListThird Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2020-35532
- https://www.cve.org/CVERecord?id=CVE-2020-35532
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2020-35532 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2122357 | Issue Tracking | |
| https://github.com/LibRaw/LibRaw/commit/5ab45b085898e379fedc6b113e2e82a890602b1e | x_refsource_MISCPatchThird Party Advisory | |
| https://github.com/LibRaw/LibRaw/issues/271 | x_refsource_MISCExploitIssue TrackingPatchThird Party Advisory | |
| https://lists.debian.org/debian-lts-announce/2022/09/msg00024.html | mailing-listx_refsource_MLISTMailing ListThird Party Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2020-35532 | ||
| https://www.cve.org/CVERecord?id=CVE-2020-35532 |
Change history (0)
No recorded changes yet.