CVE-2018-5812: Null Pointer Dereference
Published Dec 7, 2018
·Updated
An error within the "nikoncoolscanloadraw()" function (internal/dcrawcommon.cpp) in LibRaw versions prior to 0.18.9 can be exploited to trigger a NULL pointer dereference.
Affected Software
5 affected componentsFixes available
Libraw Libraw<0.18.9
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=18.04
debian/libraw
0.20.2-1+deb11u10.20.2-1+deb11u20.20.2-2.1+deb12u10.21.4-20.21.5b-1
Remediation
Event History
Dec 7, 2018
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
DescriptionWeakness
Data Sourced
via NVD·10:29 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·11:08 PM
Description
Feb 21, 2026
Data Sourced
via Ubuntu·08:26 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Debian·08:26 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is CVE-2018-5812?
CVE-2018-5812 is a vulnerability in the LibRaw library, specifically in the "nikon_coolscan_load_raw()" function, that can be exploited to trigger a NULL pointer dereference.
2
What is the severity of CVE-2018-5812?
The severity of CVE-2018-5812 is medium with a CVSS score of 6.5.
3
How do I know if I am affected by CVE-2018-5812?
You are affected by CVE-2018-5812 if you are using a version of LibRaw prior to 0.18.9.
4
How can I fix CVE-2018-5812?
To fix CVE-2018-5812, update your LibRaw library to version 0.18.9 or later.
5
Where can I find more information about CVE-2018-5812?
You can find more information about CVE-2018-5812 on the official LibRaw GitHub repository and on the Secunia Research website.