CVE-2015-8367
First published: Tue Jan 14 2020(Updated: )
The phase_one_correct function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Libraw Libraw | <0.17.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2015-8367?
CVE-2015-8367 is a vulnerability in Libraw before version 0.17.1 that allows attackers to cause memory errors and possibly execute arbitrary code.
What is the severity level of CVE-2015-8367?
CVE-2015-8367 has a severity level of critical with a severity value of 9.8.
How can this vulnerability impact my system?
This vulnerability can lead to memory errors and potentially enable attackers to execute arbitrary code on your system.
Which software versions are affected by CVE-2015-8367?
Libraw versions before 0.17.1 are affected by this vulnerability.
Is there a fix available for CVE-2015-8367?
Yes, updating to Libraw version 0.17.1 or later mitigates this vulnerability.
- collector/nvd-index
- agent/type
- vendor/libraw
- canonical/libraw libraw