CVE-2017-14608

Critical

Published: 20/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In LibRaw through version 0.18.4, an out of bounds read flaw related to kodak_65000_load_raw has been reported in dcraw/dcraw.c and internal/dcraw_common.cpp. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash.

Risk Assessment

This vulnerability could lead to the disclosure of sensitive data or application instability, impacting the organization's security.

Recommendation

It is recommended to update LibRaw to the latest version to mitigate this vulnerability and to monitor applications for unauthorized access.

Original NVD description (English source)

In LibRaw through 0.18.4, an out of bounds read flaw related to kodak_65000_load_raw has been reported in dcraw/dcraw.c and internal/dcraw_common.cpp. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash.