libraw (SUSE:Linux Enterprise Software Development Kit 12 SP4) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Software Development Kit 12 SP4 package libraw, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (9)

• CVE-2018-5808 — CVSS 8.8 (high): An error within the "find_green()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause a…
• CVE-2018-5805 — CVSS 8.8 (high): A boundary error within the "quicktake_100_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be…
• CVE-2018-5817 — CVSS 7.5 (high): A type confusion error within the "unpacked_load_raw()" function within LibRaw versions prior to 0.19.1 (internal/dcraw_common.cpp) can be…
• CVE-2018-5818 — CVSS 7.5 (high): An error within the "parse_rollei()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to…
• CVE-2018-5819 — CVSS 7.5 (high): An error within the "parse_sinar_ia()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to…
• CVE-2018-5806 — CVSS 6.5 (medium): An error within the "leaf_hdr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to…
• CVE-2018-20364 — CVSS 6.5 (medium): LibRaw::copy_bayer in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.
• CVE-2018-20365 — CVSS 6.5 (medium): LibRaw::raw2image() in libraw_cxx.cpp has a heap-based buffer overflow.
• CVE-2018-20363 — CVSS 6.5 (medium): LibRaw::raw2image in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.