CVE-2017-6886

Critical

Published: 16/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An error in the 'parse_tiff_ifd()' function in LibRaw versions before 0.18.2 can be exploited to corrupt memory.

Exploitation of this vulnerability may lead to application crashes or unauthorized access to memory, posing a threat to system integrity.

It is recommended to update LibRaw to version 0.18.2 or later to mitigate this vulnerability.

Original NVD description (English source)

An error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to corrupt memory.