GCVE-VVD-MAGEIA-2017-223 — Vulnetix

GCVE-VVD-MAGEIA-2017-223

Advisory Published

Vulnetix · Advisory published July 28, 2017

A memory corruption in parse_tiff_ifd() function (CVE-2017-6886). A memory corruption via e.g. a specially crafted KDC file parse_tiff_ifd() (CVE-2017-6887). An integer overflow error within the "foveon_load_camf()" function (CVE-2017-6889). A boundary error within the "foveon_load_camf()" function (CVE-2017-6890).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	libraw	0 (affected), 0.16.2-1.2.mga5 (unaffected)	—

Aliases

CVE-2017-6889 CVE-2017-6887 CVE-2017-6890 CVE-2017-6886

Transitive aliases

VVD-GENTOO-2017-628568 GHSA-3g72-9f6h-w6pf GHSA-rcgw-xxcv-r49v OPENSUSE-SU-2024:10980-1 GSD-2017-6889 EUVD-2017-15944 EUVD-2017-15941 EUVD-2017-15940 GHSA-h3rm-p42x-h7h7 EUVD-2017-15943 GSD-2017-6890 GHSA-hh27-7rq7-g8w3 CNVD-2017-09372 CNVD-2017-09371

References

Updated libraw packages fix security vulnerabilities

advisory

Updated libraw packages fix security vulnerabilities

issue

Updated libraw packages fix security vulnerabilities

issue

Browse GCVE Records

78,808 records in the GCVE database · Updated July 13, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON

$ Console Community · 100/wk Open console ›