VDB

CVE-2015-8366

CVE-2015-8366 PUBLISHED CVSS 9.800000190734863 CRITICAL

Array index error in smal_decode_segment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes.

EPSS 5.07% · 92.0th percentile

Risk Scores

CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
5.07%
92.0th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSexactimage0, 1.0.2-5ubuntu2, 1.0.2-7ubuntu2
Ubuntu:22.04:LTSrawtherapee5.8-3, 0
Ubuntu:18.04:LTSdarktable2.2.5-2, 2.4.1-1, 0
Ubuntu:16.04:LTSkodi*, 0, 15.1+dfsg1-3
Ubuntu:20.04:LTSkodi2:17.6+dfsg1-4ubuntu4, *, *
Ubuntu:24.04:LTSdarktable0, 4.4.2-1ubuntu2, 4.4.2-1ubuntu1
Ubuntu:18.04:LTSdcraw9.27-1ubuntu1, 0
Ubuntu:25.10darktable0, 5.0.1-1, 5.0.1-2
Ubuntu:16.04:LTSdarktable1.6.9-1, 2.0.0-1, 2.0.1-1
Ubuntu:16.04:LTSufraw0, 0.20-3build1
Ubuntu:16.04:LTSdcraw9.21-0.2, 0
Ubuntu:24.04:LTSkodi0, 2:20.5+dfsg-1ubuntu1, 2:20.5+dfsg-1build2
Ubuntu:24.04:LTSrawtherapee5.10-1build3, 5.9-2, 5.10-1
Ubuntu:18.04:LTSrawtherapee5.2-1, 5.3-1, 0
Ubuntu:25.10rawtherapee5.11-2build2, 0
Ubuntu:16.04:LTSexactimage0.9.1-8ubuntu1, 0.9.1-11, 0.9.1-12ubuntu1
Ubuntu:24.04:LTSexactimage1.0.2-11build2, 1.0.2-11build3, 1.0.2-11build4
Ubuntu:25.10kodi0, 2:21.2+dfsg-4build1, 2:21.2+dfsg-4
Ubuntu:18.04:LTSexactimage0, 0.9.2-1build1, 1.0.1-1
Ubuntu:22.04:LTSexactimage1.0.2-8build2, 1.0.2-8, 0

…and 8 more

Timeline

  • Dec 2, 2015 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • Jul 12, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score
  • Oct 27, 2022 EPSS Score
  • Dec 19, 2022 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 3, 2023 EPSS Score
  • May 26, 2023 EPSS Score
  • Jul 18, 2023 EPSS Score
  • Nov 1, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›