Lucene search
GoogleOSV:CVE-2020-35532HistorySep 01, 2022 - 6:15 p.m.
CVE-2020-35532
2022-09-0118:15:08
Google
osv.dev
9
libraw
vulnerability
out-of-bounds
simple_decode_row
image
large row_stride
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
6.5
Confidence
Low
EPSS
0.001
Percentile
25.7%
In LibRaw, an out-of-bounds read vulnerability exists within the “simple_decode_row()” function (libraw\src\x3f\x3f_utils_patched.cpp) which can be triggered via an image with a large row_stride field.
Related
debiancve
debiancve
CVE-2020-35532
2022-09-01 18:15:08
ubuntucve
ubuntucve
CVE-2020-35532
2022-09-01 00:00:00
prion
prion
Design/Logic Flaw
2022-09-01 18:15:00
redhatcve
redhatcve
CVE-2020-35532
2022-08-29 21:12:47
alpinelinux
alpinelinux
CVE-2020-35532
2022-09-01 18:15:08
cve
cve
CVE-2020-35532
2022-09-01 18:15:08
cvelist
cvelist
CVE-2020-35532
2022-09-01 17:51:59
veracode
veracode
Out-of-Bounds Read
2022-11-02 01:23:09
nvd
nvd
CVE-2020-35532
2022-09-01 18:15:08
debian
debian
[SECURITY] [DLA 3113-1] libraw security update
2022-09-16 10:28:18
osv
osv
libraw - security update
2022-09-16 00:00:00
libraw vulnerabilities
2022-11-07 16:57:39
openvas
openvas
Debian: Security Advisory (DLA-3113-1)
2022-09-17 00:00:00
Ubuntu: Security Advisory (USN-5715-1)
2022-11-08 00:00:00
amazon
amazon
Medium: LibRaw
2023-09-13 23:44:00
nessus
nessus
Amazon Linux 2 : LibRaw (ALAS-2023-2256)
2023-09-20 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : LibRaw vulnerabilities (USN-5715-1)
2022-11-08 00:00:00
RHEL 6 : libraw (Unpatched Vulnerability)
2024-05-11 00:00:00
ubuntu
ubuntu
LibRaw vulnerabilities
2022-11-07 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
6.5
Confidence
Low
EPSS
0.001
Percentile
25.7%
Related for OSV:CVE-2020-35532