CVEvulnerability

CVE-2013-1439

4.3 MEDIUM Published 2013-09-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-09-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P

Description

The "faster LJPEG decoder" in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a crafted photo file.

Affected configurations

• libraw libraw 0.13.0 • libraw libraw 0.13.1 • libraw libraw 0.13.2 • libraw libraw 0.13.3 • libraw libraw 0.13.4 • libraw libraw 0.13.5 • libraw libraw 0.13.6 • libraw libraw 0.13.7 • libraw libraw 0.13.8 • libraw libraw 0.14.0 • libraw libraw 0.14.1 • libraw libraw 0.14.2 • libraw libraw 0.14.3 • libraw libraw 0.14.4 • libraw libraw 0.14.5 • libraw libraw 0.14.6 • libraw libraw 0.14.7 • libraw libraw 0.15.0 • libraw libraw 0.15.1 • libraw libraw 0.15.2 • libraw libraw 0.15.3

References