In LibRaw, an out-of-bounds read vulnerability exists within the "simpledecoderow()" function (libraw\src\x3f\x3futilspatched.cpp) which can be triggered via an image with a large row_stride field.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "libraw-bin", "binary_version": "0.18.8-1ubuntu0.4" }, { "binary_name": "libraw-bin-dbgsym", "binary_version": "0.18.8-1ubuntu0.4" }, { "binary_name": "libraw-dev", "binary_version": "0.18.8-1ubuntu0.4" }, { "binary_name": "libraw-doc", "binary_version": "0.18.8-1ubuntu0.4" }, { "binary_name": "libraw16", "binary_version": "0.18.8-1ubuntu0.4" }, { "binary_name": "libraw16-dbgsym", "binary_version": "0.18.8-1ubuntu0.4" } ], "ubuntu_priority": "medium" }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_name": "digikam", "binary_version": "4:5.6.0-0ubuntu10+esm1" }, { "binary_name": "digikam-data", "binary_version": "4:5.6.0-0ubuntu10+esm1" }, { "binary_name": "digikam-dbgsym", "binary_version": "4:5.6.0-0ubuntu10+esm1" }, { "binary_name": "digikam-doc", "binary_version": "4:5.6.0-0ubuntu10+esm1" }, { "binary_name": "digikam-private-libs", "binary_version": "4:5.6.0-0ubuntu10+esm1" }, { "binary_name": "digikam-private-libs-dbgsym", "binary_version": "4:5.6.0-0ubuntu10+esm1" }, { "binary_name": "kipi-plugins", "binary_version": "4:5.6.0-0ubuntu10+esm1" }, { "binary_name": "kipi-plugins-common", "binary_version": "4:5.6.0-0ubuntu10+esm1" }, { "binary_name": "kipi-plugins-dbgsym", "binary_version": "4:5.6.0-0ubuntu10+esm1" }, { "binary_name": "showfoto", "binary_version": "4:5.6.0-0ubuntu10+esm1" }, { "binary_name": "showfoto-dbgsym", "binary_version": "4:5.6.0-0ubuntu10+esm1" } ], "ubuntu_priority": "medium" }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "libraw-bin", "binary_version": "0.19.5-1ubuntu1.1" }, { "binary_name": "libraw-bin-dbgsym", "binary_version": "0.19.5-1ubuntu1.1" }, { "binary_name": "libraw-dev", "binary_version": "0.19.5-1ubuntu1.1" }, { "binary_name": "libraw-doc", "binary_version": "0.19.5-1ubuntu1.1" }, { "binary_name": "libraw19", "binary_version": "0.19.5-1ubuntu1.1" }, { "binary_name": "libraw19-dbgsym", "binary_version": "0.19.5-1ubuntu1.1" } ], "ubuntu_priority": "medium" }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_name": "digikam", "binary_version": "4:6.4.0+dfsg-3ubuntu0.1~esm1" }, { "binary_name": "digikam-data", "binary_version": "4:6.4.0+dfsg-3ubuntu0.1~esm1" }, { "binary_name": "digikam-dbgsym", "binary_version": "4:6.4.0+dfsg-3ubuntu0.1~esm1" }, { "binary_name": "digikam-private-libs", "binary_version": "4:6.4.0+dfsg-3ubuntu0.1~esm1" }, { "binary_name": "digikam-private-libs-dbgsym", "binary_version": "4:6.4.0+dfsg-3ubuntu0.1~esm1" }, { "binary_name": "showfoto", "binary_version": "4:6.4.0+dfsg-3ubuntu0.1~esm1" }, { "binary_name": "showfoto-dbgsym", "binary_version": "4:6.4.0+dfsg-3ubuntu0.1~esm1" } ], "ubuntu_priority": "medium" }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "libraw-bin", "binary_version": "0.20.2-2ubuntu2" }, { "binary_name": "libraw-bin-dbgsym", "binary_version": "0.20.2-2ubuntu2" }, { "binary_name": "libraw-dev", "binary_version": "0.20.2-2ubuntu2" }, { "binary_name": "libraw-doc", "binary_version": "0.20.2-2ubuntu2" }, { "binary_name": "libraw20", "binary_version": "0.20.2-2ubuntu2" }, { "binary_name": "libraw20-dbgsym", "binary_version": "0.20.2-2ubuntu2" } ], "ubuntu_priority": "medium" }