Bug 2234992 (CVE-2020-22628) - CVE-2020-22628 libraw: Out of bounds read in LibRaw::stretch() function in libraw\src\postprocessing\aspect_ratio.cpp
Summary: CVE-2020-22628 libraw: Out of bounds read in LibRaw::stretch() function in li...
Keywords:
Status: NEW
Alias: CVE-2020-22628
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2235275 2235277 2234994 2234995 2235273 2235274 2235276
Blocks: 2234993
TreeView+ depends on / blocked
 
Reported: 2023-08-25 21:05 UTC by Pedro Sampaio
Modified: 2023-11-29 18:04 UTC (History)
4 users (show)

Fixed In Version: LibRaw 0.20-RC2
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description Pedro Sampaio 2023-08-25 21:05:40 UTC 
Buffer Overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspect_ratio.cpp.

References:

https://github.com/LibRaw/LibRaw/issues/269
https://github.com/LibRaw/LibRaw/commit/84bbb972d94a965f70302b85738778443540774a
Comment 2 TEJ RATHI 2023-08-28 09:07:49 UTC 
Created LibRaw tracking bugs for this issue:

Affects: fedora-all [bug 2235273]


Created LibRaw-epel tracking bugs for this issue:

Affects: epel-all [bug 2235275]


Created digikam tracking bugs for this issue:

Affects: epel-all [bug 2235277]
Affects: fedora-all [bug 2235276]


Created mingw-LibRaw tracking bugs for this issue:

Affects: fedora-all [bug 2235274]
Comment 3 nucleo 2023-08-28 11:36:44 UTC 
> https://github.com/LibRaw/LibRaw/commit/84bbb972d94a965f70302b85738778443540774a

This is very old commit. There are a lot of changes after it
https://github.com/LibRaw/LibRaw/commits/master/src/metadata/identify.cpp

digiKam uses LibRaw snapshot 2023-05-14.

Is this bug really actual?
Comment 4 Arne Reiter 2023-11-29 18:04:46 UTC 
The buffer overflow vulnerability was fixed in version LibRaw 0.20-RC2.

Currently all active branches are built at least with the same version:

Fedora 40	LibRaw-0.21.1-7.fc40	
Fedora 39	LibRaw-0.21.1-5.fc39	
Fedora 38	LibRaw-0.21.1-4.fc38	
Fedora 37	LibRaw-0.20.2-8.fc37

This bug can be closed.
Note You need to log in before you can comment on or make changes to this bug.