LibRaw 0.20 Beta 3
Approved changes feed: RSS · Atom
cpe:2.3:a:libraw:libraw:0.20:beta3:*:*:*:*:*:*
part: a version: 0.20 update: beta3
| Vendor | Libraw (3d0ebedf-f60e-57e5-a38a-8613009f45f5) |
|---|---|
| Product | Libraw (42eb3480-10b5-55d8-864b-c109491d58b4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libraw-bin |
purl2cpe | 2026-06-01 10:14:46.955158 |
pkg:deb/ubuntu/libraw-bin |
purl2cpe | 2026-06-01 10:14:46.955159 |
pkg:github/libraw/libraw |
purl2cpe | 2026-06-01 10:14:46.955161 |
pkg:gitlab/redhat/libraw |
purl2cpe | 2026-06-01 10:14:46.955162 |
pkg:libraw/libraw |
purl2cpe | 2026-06-01 10:14:46.955163 |
pkg:rpm/centos/libraw |
purl2cpe | 2026-06-01 10:14:46.955165 |
pkg:rpm/fedora/libraw |
purl2cpe | 2026-06-01 10:14:46.955166 |
pkg:rpm/opensuse/libraw |
purl2cpe | 2026-06-01 10:14:46.955167 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-15503 |
vulnerable | 2026-06-08 05:19:26.003041 |
Details available
LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp, postprocessing/mem_image.cpp, and utils/thumb_utils.cpp. For example, malloc(sizeof(libraw_processed_image_t)+T.tlength) occurs without validating T.tlength.
Published: 2020-07-02T00:00:00.000Z
Updated: 2024-08-04T13:15:20.694Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15365 |
vulnerable | 2026-06-08 05:19:25.747606 |
Details available
LibRaw before 0.20-Beta3 has an out-of-bounds write in parse_exif() in metadata\exif_gps.cpp via an unrecognized AtomName and a zero value of tiff_nifds.
Published: 2020-06-28T12:07:34.000Z
Updated: 2024-08-04T13:15:20.062Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.