CVE-2020-35532

In LibRaw, an out-of-bounds read vulnerability exists within the "simpledecoderow()" function (libraw\src\x3f\x3futilspatched.cpp) which can be triggered via an image with a large row_stride field.

References

Affected packages

Git / github.com/libraw/libraw

Affected ranges

Type: GIT
Repo: https://github.com/libraw/libraw
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

5ab45b085898e379fedc6b113e2e82a890602b1e

Affected versions

0.*

0.11.0-Release

0.11.1

0.11.2

0.12.0

0.12.1

0.13.0

0.13.1

0.13.2

0.13.3

0.13.4

0.13.5

0.13.6

0.13.7

0.13.8

0.14.0

0.14.1

0.14.2

0.14.3

0.14.4

0.14.5

0.14.6

0.15.0

0.16.0

0.17.0

0.18.0

Database specific

vanir_signatures

[
    {
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/libraw/libraw/commit/5ab45b085898e379fedc6b113e2e82a890602b1e",
        "digest": {
            "function_hash": "213568343310910898600674811266997841845",
            "length": 1264.0
        },
        "target": {
            "function": "simple_decode_row",
            "file": "src/x3f/x3f_utils_patched.cpp"
        },
        "deprecated": false,
        "id": "CVE-2020-35532-05a6540b"
    },
    {
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/libraw/libraw/commit/5ab45b085898e379fedc6b113e2e82a890602b1e",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "328840561769977566781867518991491042441",
                "310875237608132038042484182185969086601",
                "261945196420340983425097196176001449722"
            ]
        },
        "target": {
            "file": "src/x3f/x3f_utils_patched.cpp"
        },
        "deprecated": false,
        "id": "CVE-2020-35532-4486dc52"
    }
]