Approved changes feed: RSS · Atom

cpe:2.3:a:libraw:libraw:0.19.1:*:*:*:*:*:*:*

part: a version: 0.19.1 update: *

VendorLibraw (3d0ebedf-f60e-57e5-a38a-8613009f45f5)
ProductLibraw (42eb3480-10b5-55d8-864b-c109491d58b4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libraw-bin purl2cpe 2026-06-01 10:14:46.955031
pkg:deb/ubuntu/libraw-bin purl2cpe 2026-06-01 10:14:46.955032
pkg:github/libraw/libraw purl2cpe 2026-06-01 10:14:46.955033
pkg:gitlab/redhat/libraw purl2cpe 2026-06-01 10:14:46.955035
pkg:libraw/libraw purl2cpe 2026-06-01 10:14:46.955036
pkg:rpm/centos/libraw purl2cpe 2026-06-01 10:14:46.955038
pkg:rpm/fedora/libraw purl2cpe 2026-06-01 10:14:46.955039
pkg:rpm/opensuse/libraw purl2cpe 2026-06-01 10:14:46.955041

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-20337 vulnerable 2026-06-08 05:11:27.001991 Details available
There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact.
Published: 2018-12-21T09:00:00.000Z
Updated: 2024-08-05T11:58:19.183Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.