CVE-2018-5804

A type confusion error within the "identify()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to trigger a division by zero.

References

Affected packages

Git / github.com/libraw/libraw

Affected ranges

Type

GIT

Repo

https://github.com/libraw/libraw

Events

Introduced

Fixed

9f26ce37f5be86ea11bfc6831366558650b1f6ff

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.18.8"
        }
    ]
}

Affected versions

0.*

0.12.0

0.13.0

0.13.1

0.13.2

0.13.3

0.13.4

0.13.5

0.13.6

0.14.0

0.14.1

0.14.2

0.14.3

0.14.4

0.14.5

0.14.6

0.15.0

0.16.0

0.17.0

0.18.0

0.18.1

0.18.2

0.18.3

0.18.4

0.18.5

0.18.6

0.18.7

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-5804.json"