Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-35535

In LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF()" function (libraw\src\metadata\sony.cpp) when processing srf files.

Published

2022-09-01T18:15:09.027

Last Modified

2024-11-21T05:27:31.240

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

Weaknesses

Type: Secondary
CWE-125
Type: Primary
CWE-125

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	libraw	libraw	0.20.0	Yes
Application	libraw	libraw	0.20.0	Yes
Application	libraw	libraw	0.20.1	Yes
Application	libraw	libraw	0.20.2	Yes
Application	libraw	libraw	0.21.0	Yes

References

https://github.com/LibRaw/LibRaw/commit/c243f4539233053466c1309bde606815351bee81 Patch, Third Party Advisory ([email protected])
https://github.com/LibRaw/LibRaw/issues/283 Exploit, Issue Tracking, Patch, Third Party Advisory ([email protected])
https://github.com/LibRaw/LibRaw/commit/c243f4539233053466c1309bde606815351bee81 Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/LibRaw/LibRaw/issues/283 Exploit, Issue Tracking, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)