CVE-2017-6890

Critical

Published: 15/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A boundary error in the 'foveon_load_camf()' function in LibRaw-demosaic-pack-GPL2 before version 0.18.2 can be exploited to cause a stack-based buffer overflow.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized memory access, threatening system integrity.

Recommendation

It is recommended to upgrade to LibRaw-demosaic-pack-GPL2 version 0.18.2 or later to mitigate this vulnerability.

Original NVD description (English source)

A boundary error within the "foveon_load_camf()" function (dcraw_foveon.c) when initializing a huffman table in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a stack-based buffer overflow.