CVE-2018-20364: Null Pointer Dereference
Last updated 11 July 2025
Other sources
LibRaw::copybayer in librawcxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/librawto a version that resolves this vulnerability.Fixed in 0.20.2-1+deb11u1Fixed in 0.20.2-1+deb11u2Fixed in 0.20.2-2.1+deb12u1Fixed in 0.21.4-2Fixed in 0.21.5b-1 - Upgrade
Upgrade
alpine/librawto a version that resolves this vulnerability.Fixed in 0.19.2-r0
Event History
Frequently Asked Questions
What is CVE-2018-20364?
CVE-2018-20364 is a vulnerability in LibRaw 0.19.1 that causes a NULL pointer dereference.
How severe is CVE-2018-20364?
CVE-2018-20364 has a severity rating of 6.5 (medium).
Which software versions are affected by CVE-2018-20364?
LibRaw versions up to and including 0.19.1 are affected by CVE-2018-20364.
How can I fix CVE-2018-20364?
It is recommended to update LibRaw to version 0.19.2 or later to fix CVE-2018-20364.
Where can I find more information about CVE-2018-20364?
More information about CVE-2018-20364 can be found at the following references: [securityfocus.com](http://www.securityfocus.com/bid/106299), [LibRaw GitHub issue](https://github.com/LibRaw/LibRaw/issues/194), [Ubuntu Security Notice](https://usn.ubuntu.com/3989-1/).