CVE-2020-22628: Buffer Overflow
Published Aug 22, 2023
·Updated
Buffer Overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspectratio.cpp.
Affected Software
3 affected componentsFixes available
debian/libraw
0.20.2-1+deb11u10.20.2-2.10.21.3-1
Libraw Libraw<2019-11-20
Libraw Libraw<=0.19.5
Remediation
Patch Available
Event History
Aug 22, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Jan 11, 2024
Data Sourced
via Launchpad·11:45 PM
Description
Feb 13, 2025
Data Sourced
via Ubuntu·11:57 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2020-22628?
CVE-2020-22628 is a buffer overflow vulnerability in the LibRaw::stretch() function.
2
How does CVE-2020-22628 affect LibRaw?
CVE-2020-22628 affects the LibRaw library through its stretch() function in the aspect_ratio.cpp file.
3
What is the severity of CVE-2020-22628?
The severity of CVE-2020-22628 is rated as medium with a severity value of 6.5.
4
Which software versions are affected by CVE-2020-22628?
Versions of LibRaw up to and exclusive of 2019-11-20 are affected. Ubuntu versions 0.19.5-1ubuntu1.3 and 0.20.0-4 are affected as well.
5
How can I fix CVE-2020-22628?
Apply the remedy versions: 0.19.5-1ubuntu1.3 for Ubuntu, and the latest versions for Debian.