Login Request a demo
DC
Product
Dcraw
by Dcraw Project · last CVE Apr 18, 2022
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 0High 4Medium 2Low 0
Severity
All severities7Critical0High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Dcraw to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-19655
8.8
3%
Nov 29
A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a…
Affected: through 9.28
CVE-2021-3624
7.8
1%
Apr 18
There is an integer overflow vulnerability in dcraw
Affected: 9.28-2
CVE-2018-19566
7.1
1%
Nov 26
A heap buffer over-read in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or…
Affected: through 9.28
CVE-2018-19565
7.1
1%
Nov 26
A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or…
Affected: through 9.28
Showing 4