VDB
CVE-2020-15365
CVE-2020-15365
PUBLISHED
LibRaw before 0.20-Beta3 has an out-of-bounds write in parse_exif() in metadata\exif_gps.cpp via an unrecognized AtomName and a zero value of tiff_nifds.
EPSS 0.28% · 52.1th percentile
Risk Scores
EPSS Score
0.28%
52.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:18.04:LTS | exactimage | 1.0.1-1, 0, 0.9.2-1build1 |
| Ubuntu:20.04:LTS | darktable | 2.6.3-1, 3.0.1-0ubuntu1, 2.6.3-1build2 |
| Ubuntu:20.04:LTS | exactimage | 1.0.2-3, 1.0.2-5ubuntu2, 0 |
| Ubuntu:16.04:LTS | dcraw | 9.21-0.2, 0 |
| Ubuntu:25.10 | darktable | 5.0.1-0ubuntu1, 5.0.1-1, 5.0.1-2 |
| Ubuntu:16.04:LTS | kodi | 15.2+dfsg1-3ubuntu1, 15.2+dfsg1-3ubuntu1.1, 15.2+dfsg1-3 |
| Ubuntu:18.04:LTS | rawtherapee | 0, 5.2-1, 5.3-1 |
| Ubuntu:22.04:LTS | kodi | *, 2:19.1+dfsg2-2, 2:19.3+dfsg1-1 |
| Ubuntu:16.04:LTS | darktable | 0, 2.0.3-1, 2.0.1-1 |
| Ubuntu:22.04:LTS | darktable | 0, 3.8.1-2, 3.8.1-1 |
| Ubuntu:22.04:LTS | dcraw | 9.28-3, 9.28-2, 0 |
| Ubuntu:24.04:LTS | exactimage | 1.0.2-11build8, 1.0.2-11build7, 1.0.2-11build3 |
| Ubuntu:18.04:LTS | ufraw | 0.22-1.1, 0.22-3.1ubuntu0.1, * |
| Ubuntu:18.04:LTS | dcraw | 0, 9.27-1ubuntu1 |
| Ubuntu:16.04:LTS | rawtherapee | 0, 4.2-2build1, 4.2-4 |
| Ubuntu:22.04:LTS | exactimage | 0, 1.0.2-8build3, 1.0.2-8build2 |
| Ubuntu:20.04:LTS | dcraw | 0, 9.28-2 |
| Ubuntu:22.04:LTS | rawtherapee | 0, 5.8-3 |
| Ubuntu:24.04:LTS | kodi | 0, 2:20.2+dfsg-4build1, 2:20.2+dfsg-4build2 |
| Ubuntu:25.10 | exactimage | 1.2.1-2, 0 |
…and 12 more
Exploit Intelligence
Timeline
- Jun 28, 2020 CVE Published
- Jul 6, 2020 CVE Updated
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Feb 28, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
References
- https://ubuntu.com/security/CVE-2020-15365 third-party-advisory
- https://github.com/LibRaw/LibRaw/issues/301 third-party-advisory
- https://github.com/LibRaw/LibRaw/commit/55f0a0c08974b8b79ebfa7762b555a1704b25fb2 third-party-advisory
- https://github.com/LibRaw/LibRaw/compare/0.20-Beta2...0.20-Beta3 third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2020-15365 third-party-advisory