CVE-2017-6889: Buffer Overflow
Published May 15, 2017
·Updated
An integer overflow error within the "foveonloadcamf()" function (dcrawfoveon.c) in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a heap-based buffer overflow.
Affected Software
1 affected component
Libraw LibRaw-demosaic-pack-GPL2<=0.18.1
Remediation
Event History
May 15, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-6889?
CVE-2017-6889 is classified as a high severity vulnerability due to its potential for exploitation leading to heap-based buffer overflow.
2
How do I fix CVE-2017-6889?
To fix CVE-2017-6889, users should upgrade to LibRaw-demosaic-pack-GPL2 version 0.18.2 or later.
3
What type of vulnerability is CVE-2017-6889?
CVE-2017-6889 is an integer overflow vulnerability that can be exploited to cause a heap-based buffer overflow.
4
Which versions of LibRaw-demosaic-pack-GPL2 are affected by CVE-2017-6889?
CVE-2017-6889 affects LibRaw-demosaic-pack-GPL2 versions up to and including 0.18.1.
5
In which function does CVE-2017-6889 occur?
CVE-2017-6889 occurs within the "foveon_load_camf()" function in the LibRaw-demosaic-pack-GPL2.