Msrc Azl3 Libraw 0.19.5-5 On Azure Linux 3.0 vulnerabilities

1 known vulnerability affecting msrc/azl3_libraw_0.19.5-5_on_azure_linux_3.0.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2020-15503HIGHCVSS 7.52020-07-14
CVE-2020-15503 [HIGH] CWE-20 LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp postprocessing/mem_image.cpp and utils/thumb_utils.cpp. For example malloc(sizeof(libraw_processed_ima LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp postprocessing/mem_image.cpp and utils/thumb_utils.cpp. For example malloc(sizeof(libraw_processed_image_t)+T.tlength) occurs without validating T.tlength. FAQ: Is Azure L
msrc