CVEvulnerability

CVE-2020-35534

5.5 MEDIUM Published 2022-09-01 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2022-09-01
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses: CWE-400, CWE-770

Description

In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function (libraw\src\decoders\crx.cpp) when processing cr3 files.

Affected configurations

• libraw libraw 0.20.0 • libraw libraw 0.20.1 • libraw libraw 0.20.2 • libraw libraw 0.21.0

Weakness · CWE (2)

CWE-400 Uncontrolled Resource Consumption weakness
CWE-770 Allocation of Resources Without Limits or Throttling weakness

References

https://github.com/LibRaw/LibRaw/commit/e41f331e90b383e3208cefb74e006df44bf3a4b8 Patch, Third Party Advisory
https://github.com/LibRaw/LibRaw/issues/279 Issue Tracking, Patch, Third Party Advisory
https://github.com/LibRaw/LibRaw/commit/e41f331e90b383e3208cefb74e006df44bf3a4b8 Patch, Third Party Advisory
https://github.com/LibRaw/LibRaw/issues/279 Issue Tracking, Patch, Third Party Advisory

CVE-2020-35534

Description

Affected configurations

Related

Weakness · CWE (2)

References