Total vulnerabilities in the database
In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patched.cpp) that can be triggered via a crafted X3F file.
| Software | From | Fixed in |
|---|---|---|
| libraw / libraw | 0.20.1 | 0.20.1.x |
| libraw / libraw | 0.21.0-beta1 | 0.21.0-beta1.x |
| libraw / libraw | 0.20.2 | 0.20.2.x |
| libraw / libraw | 0.20.0-rc2 | 0.20.0-rc2.x |
| libraw / libraw | 0.20.0 | 0.20.0.x |
| debian / debian_linux | 10.0 | 10.0.x |