CVE-2018-20365 — Vulnetix

CVE-2018-20365 PUBLISHED

LibRaw::raw2image() in libraw_cxx.cpp has a heap-based buffer overflow.

EPSS 0.44% · 63.8th percentile

Risk Scores

EPSS Score

0.44%

63.8th percentile

Vendor	Product	Versions
Ubuntu:16.04:LTS	ufraw	0.20-3build1, 0
Ubuntu:16.04:LTS	dcraw	0, 9.21-0.2
Ubuntu:25.10	darktable	0, 5.0.1-0ubuntu1, 5.0.1-1
Ubuntu:16.04:LTS	libraw	0.16.2-1, 0.17.0-1, 0.17.1-1ubuntu0.1
Ubuntu:22.04:LTS	rawtherapee	5.8-3, 0
Ubuntu:20.04:LTS	darktable	2.6.3-1, 0, 2.6.0-1
Ubuntu:20.04:LTS	rawtherapee	0, 5.7-1, 5.6-1
Ubuntu:20.04:LTS	dcraw	0, 9.28-2
Ubuntu:24.04:LTS	exactimage	1.0.2-11build7, 1.0.2-11build9, 1.0.2-11build3
Ubuntu:18.04:LTS	dcraw	0, 9.27-1ubuntu1
Ubuntu:22.04:LTS	darktable	3.8.0-3, 0, 3.6.0-0ubuntu1
Ubuntu:25.10	kodi	2:21.2+dfsg-1build2, 2:21.2+dfsg-4, 2:21.2+dfsg-4build1
Ubuntu:24.04:LTS	darktable	4.4.2-1ubuntu2, 4.6.1-2build3, 4.6.1-2
Ubuntu:22.04:LTS	exactimage	1.0.2-8build2, 1.0.2-8build1, 1.0.2-8build3
Ubuntu:24.04:LTS	kodi	2:20.2+dfsg-4ubuntu1, 2:20.2+dfsg-4build1, 2:20.2+dfsg-4build2
Ubuntu:18.04:LTS	libraw	0, 0.18.8-1ubuntu0.2, 0.18.8-1ubuntu0.1
Ubuntu:25.10	exactimage	1.2.1-2, 0
Ubuntu:18.04:LTS	kodi	2:17.6+dfsg1-1build1, ,
Ubuntu:18.04:LTS	ufraw	0.22-1.1, 0.22-3, *
Ubuntu:24.04:LTS	dcraw	9.28-5ubuntu1, 0, 9.28-3

…and 14 more