Buffer Overflow

2023-12-2815:12:15

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

libraw

buffer overflow

vulnerability

jpeg_start function

denial of service

software

improper size checks

raw image

exploit

attacker

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

Low

EPSS

0.048

Percentile

92.7%

JSON

LibRaw is vulnerable to Buffer Overflow. The vulnerability is due to improper size checks of the len variable in the jpeg_start function within dcraw. This issue can be exploited by an attacker via a maliciously crafted raw image resulting in Denial of Service.