CVE-2018-5801

Un error en la función "LibRaw::unpack()" (src/libraw_cxx.cpp) en LibRaw, en versiones anteriores a la 0.18.7, puede explotarse para desencadenar una desreferencia de puntero NULL.

A NULL pointer dereference flaw was found in the way LibRaw processed images. An attacker could potentially use this flaw to crash applications using LibRaw by tricking them into processing crafted images.

An update that fixes 11 vulnerabilities is now available. This update for dcraw fixes the following issues. Fixed a denial of service issue due to a floating point exception. Fixed an invalid memory access that could lead to information disclosure or denial of service. Fixed a buffer overflow that could lead to an application crash. Fixed an invalid memory access that could lead to denial of service. Fixed a buffer overflow that could lead to an application crash. Fixed an invalid memory access that could lead to denial of service. Fixed an invalid memory access that could lead to information disclosure or denial of service. Fixed an invalid memory access that could lead to information disclosure or denial of service. Fixed a denial of service issue due to a floating point exception. Fixed a denial of service issue due to a floating point exception. Fixed a buffer overflow that could lead to code execution or denial of service.