In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function (libraw\src\decoders\crx.cpp) when processing cr3 fil...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function (libraw\src\decoders\crx.cpp) when processing cr3 files.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 libraw

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.0-4"}]}]

Debian:13 libraw

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.0-4"}]}]

Debian:14 libraw

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.0-4"}]}]

参照URL

advisory security-tracker.debian.org