CVE-2017-6887

State: Published
Severity: Not scored
Published: May 16, 2017
Updated: Aug 5, 2024
Reserved: Mar 14, 2017

Description

A boundary error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to cause a memory corruption via e.g. a specially crafted KDC file with model set to "DSLR-A100" and containing multiple sequences of 0x100 and 0x14A TAGs.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LibRawLibRaw	0.x prior to 0.18.2Affected

References

98592vdb-entry
https://secuniaresearch.flexerasoftware.com/secunia_research/2017-6/
https://secuniaresearch.flexerasoftware.com/advisories/75737/
DSA-3950vendor-advisory
https://github.com/LibRaw/LibRaw/commit/d7c3d2cb460be10a3ea7b32e9443a83c243b2251

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.