An integer overflow error within the "identify()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.12 can be exploited to trigger a division by zero via specially crafted NOKIARAW file (Note: This vulnerability is caused due to an incomplete fix of CVE-2018-5804).
[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"149115307467341041946650920507335754192",
"249788294694743818553041987795189000353",
"264130181463166165130195137198822619265",
"146931122158647408271548350055420031602"
]
},
"id": "CVE-2018-5816-13e2e5a8",
"target": {
"file": "internal/dcraw_common.cpp"
},
"source": "https://github.com/libraw/libraw/commit/1d8d1b452e5dc74033ee9f846081a0efb616cc39",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"149115307467341041946650920507335754192",
"249788294694743818553041987795189000353",
"264130181463166165130195137198822619265",
"146931122158647408271548350055420031602"
]
},
"id": "CVE-2018-5816-314ae728",
"target": {
"file": "dcraw/dcraw.c"
},
"source": "https://github.com/libraw/libraw/commit/1d8d1b452e5dc74033ee9f846081a0efb616cc39",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"function_hash": "146558577448886377438406580047394554080",
"length": 61590.0
},
"id": "CVE-2018-5816-44d9dffa",
"target": {
"file": "internal/dcraw_common.cpp",
"function": "identify"
},
"source": "https://github.com/libraw/libraw/commit/1d8d1b452e5dc74033ee9f846081a0efb616cc39",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"function_hash": "146558577448886377438406580047394554080",
"length": 61590.0
},
"id": "CVE-2018-5816-a0d39601",
"target": {
"file": "dcraw/dcraw.c",
"function": "identify"
},
"source": "https://github.com/libraw/libraw/commit/1d8d1b452e5dc74033ee9f846081a0efb616cc39",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
}
]