A flaw was found in LibRaw versions before 0.18.9. Another error within the nikon_coolscan_load_raw() function (internal/dcraw_common.cpp) can be exploited to trigger a NULL pointer dereference. References: https://secuniaresearch.flexerasoftware.com/secunia_research/2018-10/
Created LibRaw tracking bugs for this issue: Affects: epel-6 [bug 1610487]
Upstream patch: https://github.com/LibRaw/LibRaw/commit/c9d8143eba4ff397163665e2119c6c5d7db54c55