CVE-2020-35535
N/A
N/A
Summary
In LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF()" function (libraw\src\metadata\sony.cpp) when processing srf files.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | LibRaw | LibRaw 0.21-Beta1, LibRaw 0.20.2, LibRaw 0.20.1, LibRaw 0.20.0, LibRaw 0.20-RC2 | affected |
Weaknesses
- CWE-125: CWE-125
ADP Enrichment
CVE Program Container
Additional References
- https://github.com/LibRaw/LibRaw/issues/283
- https://github.com/LibRaw/LibRaw/commit/c243f4539233053466c1309bde606815351bee81
References
- https://github.com/LibRaw/LibRaw/issues/283
- https://github.com/LibRaw/LibRaw/commit/c243f4539233053466c1309bde606815351bee81
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.