dcraw project records

7 published records for vendor dcraw project.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
36Monitor	CVE-2018-19655No exploit	A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow dcraw project · dcraw · CWE-787 Pre-auth Memory safety	High8.8	—	2.8%	Nov 29, 2018
31Monitor	CVE-2021-3624No exploit	There is an integer overflow vulnerability in dcraw.dcraw project · dcraw · CWE-20 RCE	High7.8	—	0.9%	Apr 18, 2022
28Monitor	CVE-2018-19565No exploit	A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an applicadcraw project · dcraw · CWE-125 Memory safety	High7.1	—	1.0%	Nov 26, 2018
28Monitor	CVE-2018-19566No exploit	A heap buffer over-read in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an applicdcraw project · dcraw · CWE-125 Memory safety	High7.1	—	1.0%	Nov 26, 2018
22Monitor	CVE-2018-19567No exploit	A floating point exception in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an appdcraw project · dcraw · CWE-119 Memory safety Denial of service	Medium5.5	—	0.9%	Nov 26, 2018
22Monitor	CVE-2018-19568No exploit	A floating point exception in kodak_radc_load_raw in dcraw through 9.28 could be used by attackers able to supply malicious files to crash adcraw project · dcraw · CWE-119 Memory safety Denial of service	Medium5.5	—	0.9%	Nov 26, 2018
19Monitor	CVE-2015-3885No exploit	Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service (crash) via a crdcraw project · dcraw · CWE-189 Pre-auth Denial of service	Medium4.3	—	5.4%	May 19, 2015

CVE-2018-19655
36Monitor
A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow
HighCVSS 8.8No exploitEPSS 2%
- Pre-auth
- Memory safety
dcraw project · dcrawNov 29, 2018
CVE-2021-3624
31Monitor
There is an integer overflow vulnerability in dcraw.
HighCVSS 7.8No exploitEPSS 0%
- RCE
dcraw project · dcrawApr 18, 2022
CVE-2018-19565
28Monitor
A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an applica
HighCVSS 7.1No exploitEPSS 1%
- Memory safety
dcraw project · dcrawNov 26, 2018
CVE-2018-19566
28Monitor
A heap buffer over-read in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an applic
HighCVSS 7.1No exploitEPSS 1%
- Memory safety
dcraw project · dcrawNov 26, 2018
CVE-2018-19567
22Monitor
A floating point exception in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an app
MediumCVSS 5.5No exploitEPSS 0%
- Memory safety
- Denial of service
dcraw project · dcrawNov 26, 2018
CVE-2018-19568
22Monitor
A floating point exception in kodak_radc_load_raw in dcraw through 9.28 could be used by attackers able to supply malicious files to crash a
MediumCVSS 5.5No exploitEPSS 0%
- Memory safety
- Denial of service
dcraw project · dcrawNov 26, 2018
CVE-2015-3885
19Monitor
Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service (crash) via a cr
MediumCVSS 4.3No exploitEPSS 5%
- Pre-auth
- Denial of service
dcraw project · dcrawMay 19, 2015