A flaw was found in LibRaw versions before 0.18.9. An error within the nikon_coolscan_load_raw() function (internal/dcraw_common.cpp) can be exploited to cause an out-of-bounds read memory access and subsequently cause a crash. References: https://secuniaresearch.flexerasoftware.com/secunia_research/2018-10/
Created LibRaw tracking bugs for this issue: Affects: epel-6 [bug 1610484]
Upstream patch: https://github.com/LibRaw/LibRaw/commit/c9d8143eba4ff397163665e2119c6c5d7db54c55
Statement: This issue did not affect the versions of LibRaw as shipped with Red Hat Enterprise Linux 7 as they did not include the vulnerable code.