GHSA-682q-f6x6-8x24

GHSA-682q-f6x6-8x24 PUBLISHED CVSS 7.099999904632568 HIGH

Record from GitHub Advisory Database · Published May 14, 2022

A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information.

Risk scores

CVSS 3.0

7.099999904632568

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Timeline

May 14, 2022 CVE Published
Apr 9, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-682q-f6x6-8x24
vulnetix vdb fixes GHSA-682q-f6x6-8x24

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-682q-f6x6-8x24/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://nvd.nist.gov/vuln/detail/CVE-2018-19565 advisory
https://seclists.org/oss-sec/2018/q4/165 url
https://seclists.org/oss-sec/2018/q4/171 url

Look up in the Resolve Platform →