CVE-2020-15503

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2020-15503
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-15503.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2020-15503
Downstream
Related
Published
2020-07-02T14:15:11Z
Modified
2025-10-15T12:04:52.403045Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpackthumb.cpp, postprocessing/memimage.cpp, and utils/thumbutils.cpp. For example, malloc(sizeof(librawprocessedimaget)+T.tlength) occurs without validating T.tlength.

References

Affected packages

Git / github.com/libraw/libraw

Affected ranges

Type
GIT
Repo
https://github.com/libraw/libraw
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
20ad21c0d87ca80217aee47533d91e633ce1864d

Affected versions

0.*

0.11.0-Release
0.11.1
0.11.2
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.13.4
0.13.5
0.13.6
0.13.7
0.13.8
0.14.0
0.14.1
0.14.2
0.14.3
0.14.4
0.14.5
0.14.6
0.15.0
0.16.0
0.17.0
0.18.0

Database specific

vanir_signatures

[
    {
        "signature_version": "v1",
        "target": {
            "file": "src/utils/thumb_utils.cpp"
        },
        "id": "CVE-2020-15503-4de4e8ed",
        "source": "https://github.com/libraw/libraw/commit/20ad21c0d87ca80217aee47533d91e633ce1864d",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "95504925387959412511911477587878745185",
                "211498614830520016092898085902592191304",
                "258909625175771742828218197375693978553"
            ]
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "LibRaw::kodak_thumb_loader",
            "file": "src/utils/thumb_utils.cpp"
        },
        "id": "CVE-2020-15503-b47b1d85",
        "source": "https://github.com/libraw/libraw/commit/20ad21c0d87ca80217aee47533d91e633ce1864d",
        "digest": {
            "function_hash": "20834980326322708084884246758929434607",
            "length": 5265.0
        },
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "LibRaw::dcraw_make_mem_thumb",
            "file": "src/postprocessing/mem_image.cpp"
        },
        "id": "CVE-2020-15503-bab2ecca",
        "source": "https://github.com/libraw/libraw/commit/20ad21c0d87ca80217aee47533d91e633ce1864d",
        "digest": {
            "function_hash": "60925816791984355313585374140980915893",
            "length": 1869.0
        },
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "src/decoders/unpack_thumb.cpp"
        },
        "id": "CVE-2020-15503-bd149f8b",
        "source": "https://github.com/libraw/libraw/commit/20ad21c0d87ca80217aee47533d91e633ce1864d",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "59779410903218153793678754994680767601",
                "132752582361061888394256996303006118673",
                "185045691167740575729910415964833655416",
                "161049959832819816644170497010757592682",
                "260007268614515162766175710996963767171",
                "255532408959626893688328621463383668856",
                "293793618887016688055475224622010045250",
                "237163547497289955783163831819047220253",
                "53946906021982039869438027886283012302",
                "159623424722262447118890624610300865183",
                "24074827839660080180766803516914248259",
                "193770801203564601580014460272938621217",
                "279776459699944493687719371011149108112",
                "106535962320044590641199677616499872207",
                "283450966731452391535050062147183429866",
                "94649701061232974678424622551508588263",
                "211509070784551980709998278180183119961",
                "283511725562753475212592465244817300621",
                "80668828536364397405743644776123983152",
                "237567926824714123645467842340474684318",
                "285312419739008761685997607143246357862",
                "258224793432605195806530931128263774249",
                "65443162971290850839897068754309996559",
                "148315636905740143535486119577249766951",
                "181202847632146431652953263163741802944",
                "106211129585307599656075310087927609507",
                "195072596634072040877784318058145114722",
                "306099842656121619297437396043320744575",
                "239128415640668498542060449212822440966",
                "25636571237006944437910063657224247718",
                "78239118379284603983132881493921935450",
                "47533961952800260579564617492129636545"
            ]
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "LibRaw::unpack_thumb",
            "file": "src/decoders/unpack_thumb.cpp"
        },
        "id": "CVE-2020-15503-ccd49802",
        "source": "https://github.com/libraw/libraw/commit/20ad21c0d87ca80217aee47533d91e633ce1864d",
        "digest": {
            "function_hash": "51726212998995411333273680451998935224",
            "length": 7684.0
        },
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "src/postprocessing/mem_image.cpp"
        },
        "id": "CVE-2020-15503-ddbaed06",
        "source": "https://github.com/libraw/libraw/commit/20ad21c0d87ca80217aee47533d91e633ce1864d",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "187981261985522913612295356341902997356",
                "316324685096684762484593438217362973867",
                "42418153475302119724450462163414037082"
            ]
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "libraw/libraw_const.h"
        },
        "id": "CVE-2020-15503-ddf53db8",
        "source": "https://github.com/libraw/libraw/commit/20ad21c0d87ca80217aee47533d91e633ce1864d",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "249569001442104715920048703562899778"
            ]
        },
        "deprecated": false,
        "signature_type": "Line"
    }
]