CVE-2017-6889

Critical

Published: 15/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An integer overflow error in the 'foveon_load_camf()' function in LibRaw-demosaic-pack-GPL2 before version 0.18.2 can lead to a heap-based buffer overflow.

Risk Assessment

Exploitation of this vulnerability may allow unauthorized access to memory, posing a serious threat to system integrity.

Recommendation

It is recommended to update the LibRaw-demosaic-pack-GPL2 library to version 0.18.2 or later to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

An integer overflow error within the "foveon_load_camf()" function (dcraw_foveon.c) in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a heap-based buffer overflow.