https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 21:11:56 +0000 https://vulnerability.circl.lu/vuln/cve-2020-15503 <p>LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp, postprocessing/mem_image.cpp, and utils/thumb_utils.cpp. For example, malloc(sizeof(libraw_processed_image_t)+T.tlength) occurs without validating T.tlength.</p> <p>LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp, postprocessing/mem_image.cpp, and utils/thumb_utils.cpp. For example, malloc(sizeof(libraw_processed_image_t)+T.tlength) occurs without validating T.tlength.</p> https://vulnerability.circl.lu/vuln/cve-2020-15503 https://vulnerability.circl.lu/vuln/usn-5715-1 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: libraw, Ubuntu:20.04:LTS: libraw</p> <p>It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, a remote attacker could cause applications linked against LibRaw to crash, resulting in a denial of service, or possibly execute arbitrary code.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: libraw, Ubuntu:20.04:LTS: libraw</p> <p>It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, a remote attacker could cause applications linked against LibRaw to crash, resulting in a denial of service, or possibly execute arbitrary code.</p> https://vulnerability.circl.lu/vuln/usn-5715-1