CVE-2018-10528: Buffer Overflow
Published Apr 29, 2018
·Updated
An issue was discovered in LibRaw 0.18.9. There is a stack-based buffer overflow in the utf2char function in librawcxx.cpp.
Affected Software
6 affected componentsFixes available
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=17.10
Canonical Ubuntu Linux=18.04
Libraw Libraw=0.18.9
debian/libraw
0.20.2-1+deb11u10.20.2-1+deb11u20.20.2-2.1+deb12u10.21.4-20.21.5b-1
alpine/libraw<0.18.13-r0
0.18.13-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/librawto a version that resolves this vulnerability.Fixed in 0.20.2-1+deb11u1Fixed in 0.20.2-1+deb11u2Fixed in 0.20.2-2.1+deb12u1Fixed in 0.21.4-2Fixed in 0.21.5b-1 - Upgrade
Upgrade
alpine/librawto a version that resolves this vulnerability.Fixed in 0.18.13-r0
Event History
Apr 29, 2018
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Data Sourced
via NVD·03:29 AM
RemedyDescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·03:29 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2018-10528?
CVE-2018-10528 is a vulnerability in LibRaw 0.18.9 that allows for a stack-based buffer overflow.
2
How severe is CVE-2018-10528?
CVE-2018-10528 has a severity score of 8.8 (high).
3
What is the affected software for CVE-2018-10528?
The affected software for CVE-2018-10528 is LibRaw version 0.18.9.
4
Are there any fixes available for CVE-2018-10528?
Yes, fixes are available for CVE-2018-10528. Please refer to the provided references for more information on the available fixes.
5
Where can I find more information about CVE-2018-10528?
More information about CVE-2018-10528 can be found in the provided references.