CVE-2018-5806 — NULL Pointer Dereference in Libraw

CWE-476 — NULL Pointer Dereference13 documents7 sources
Severity
6.5MEDIUMNVD
EPSS
0.5%
top 33.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
LibrawRedhat Enterprise Linux DesktopRedhat Enterprise Linux Server+1 more
Timeline
PublishedDec 7
Latest updateMay 14

Description

An error within the "leaf_hdr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to trigger a NULL pointer dereference.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages6 packages

▶NVDlibraw/libraw< 0.18.8
▶Debianlibraw/libraw< 0.18.8-1+3
▶CVEListV5libraw/librawPrior to 0.18.8

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-hcxg-6ffh-5mqj: An error within the "leaf_hdr_load_raw()" function (internal/dcraw_common↗2022-05-14
▶
CVEList
CVE-2018-5806: An error within the "leaf_hdr_load_raw()" function (internal/dcraw_common↗2018-12-07
▶
OSV
CVE-2018-5806: An error within the "leaf_hdr_load_raw()" function (internal/dcraw_common↗2018-12-07
▶

📋Vendor Advisories

2
Red Hat
LibRaw: NULL pointer dereference in leaf_hdr_load_raw() function in internal/dcraw_common.cpp↗2018-03-14
▶
Debian
CVE-2018-5806: libraw - An error within the "leaf_hdr_load_raw()" function (internal/dcraw_common.cpp) i...↗2018
▶

💬Community

7
Bugzilla
CVE-2018-5806 rawtherapee: LibRaw: NULL pointer dereference in leaf_hdr_load_raw() function in internal/dcraw_common.cpp [fedora-all]↗2018-06-15
▶
Bugzilla
CVE-2018-5806 dcraw: LibRaw: NULL pointer dereference in leaf_hdr_load_raw() function in internal/dcraw_common.cpp [fedora-all]↗2018-06-15
▶
Bugzilla
CVE-2018-5806 LibRaw: NULL pointer dereference in leaf_hdr_load_raw() function in internal/dcraw_common.cpp [fedora-all]↗2018-06-15
▶
Bugzilla
CVE-2018-5806 libkdcraw: LibRaw: NULL pointer dereference in leaf_hdr_load_raw() function in internal/dcraw_common.cpp [fedora-all]↗2018-06-15
▶
Bugzilla
CVE-2018-5806 LibRaw: NULL pointer dereference in leaf_hdr_load_raw() function in internal/dcraw_common.cpp [epel-6]↗2018-06-15
▶
CVE-2018-5806 — NULL Pointer Dereference in Libraw | cvebase