In LibRaw, there is an out-of-bounds write vulnerability within the "newnode()" function (libraw\src\x3f\x3futils_patched.cpp) that can be triggered via a crafted X3F file.
{ "binaries": [ { "binary_name": "libraw-bin", "binary_version": "0.18.8-1ubuntu0.4" }, { "binary_name": "libraw-bin-dbgsym", "binary_version": "0.18.8-1ubuntu0.4" }, { "binary_name": "libraw-dev", "binary_version": "0.18.8-1ubuntu0.4" }, { "binary_name": "libraw-doc", "binary_version": "0.18.8-1ubuntu0.4" }, { "binary_name": "libraw16", "binary_version": "0.18.8-1ubuntu0.4" }, { "binary_name": "libraw16-dbgsym", "binary_version": "0.18.8-1ubuntu0.4" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "digikam", "binary_version": "4:5.6.0-0ubuntu10+esm1" }, { "binary_name": "digikam-data", "binary_version": "4:5.6.0-0ubuntu10+esm1" }, { "binary_name": "digikam-dbgsym", "binary_version": "4:5.6.0-0ubuntu10+esm1" }, { "binary_name": "digikam-doc", "binary_version": "4:5.6.0-0ubuntu10+esm1" }, { "binary_name": "digikam-private-libs", "binary_version": "4:5.6.0-0ubuntu10+esm1" }, { "binary_name": "digikam-private-libs-dbgsym", "binary_version": "4:5.6.0-0ubuntu10+esm1" }, { "binary_name": "kipi-plugins", "binary_version": "4:5.6.0-0ubuntu10+esm1" }, { "binary_name": "kipi-plugins-common", "binary_version": "4:5.6.0-0ubuntu10+esm1" }, { "binary_name": "kipi-plugins-dbgsym", "binary_version": "4:5.6.0-0ubuntu10+esm1" }, { "binary_name": "showfoto", "binary_version": "4:5.6.0-0ubuntu10+esm1" }, { "binary_name": "showfoto-dbgsym", "binary_version": "4:5.6.0-0ubuntu10+esm1" } ], "ubuntu_priority": "medium", "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro" }
{ "binaries": [ { "binary_name": "libraw-bin", "binary_version": "0.19.5-1ubuntu1.1" }, { "binary_name": "libraw-bin-dbgsym", "binary_version": "0.19.5-1ubuntu1.1" }, { "binary_name": "libraw-dev", "binary_version": "0.19.5-1ubuntu1.1" }, { "binary_name": "libraw-doc", "binary_version": "0.19.5-1ubuntu1.1" }, { "binary_name": "libraw19", "binary_version": "0.19.5-1ubuntu1.1" }, { "binary_name": "libraw19-dbgsym", "binary_version": "0.19.5-1ubuntu1.1" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "digikam", "binary_version": "4:6.4.0+dfsg-3ubuntu0.1~esm1" }, { "binary_name": "digikam-data", "binary_version": "4:6.4.0+dfsg-3ubuntu0.1~esm1" }, { "binary_name": "digikam-dbgsym", "binary_version": "4:6.4.0+dfsg-3ubuntu0.1~esm1" }, { "binary_name": "digikam-private-libs", "binary_version": "4:6.4.0+dfsg-3ubuntu0.1~esm1" }, { "binary_name": "digikam-private-libs-dbgsym", "binary_version": "4:6.4.0+dfsg-3ubuntu0.1~esm1" }, { "binary_name": "showfoto", "binary_version": "4:6.4.0+dfsg-3ubuntu0.1~esm1" }, { "binary_name": "showfoto-dbgsym", "binary_version": "4:6.4.0+dfsg-3ubuntu0.1~esm1" } ], "ubuntu_priority": "medium", "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro" }
{ "binaries": [ { "binary_name": "libraw-bin", "binary_version": "0.20.2-2ubuntu2" }, { "binary_name": "libraw-bin-dbgsym", "binary_version": "0.20.2-2ubuntu2" }, { "binary_name": "libraw-dev", "binary_version": "0.20.2-2ubuntu2" }, { "binary_name": "libraw-doc", "binary_version": "0.20.2-2ubuntu2" }, { "binary_name": "libraw20", "binary_version": "0.20.2-2ubuntu2" }, { "binary_name": "libraw20-dbgsym", "binary_version": "0.20.2-2ubuntu2" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }