CVE-2020-24889: Buffer Overflow
First published: Wed Sep 16 2020(Updated: )
A buffer overflow vulnerability in LibRaw version < 20.0 LibRaw::GetNormalizedModel in src/metadata/normalize_model.cpp may lead to context-dependent arbitrary code execution.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Libraw Libraw | <0.20.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-24889.
What is the title of this vulnerability?
The title of this vulnerability is 'A buffer overflow vulnerability in LibRaw version < 20.0 LibRaw::GetNormalizedModel in src/metadata/...'.
What is the severity of CVE-2020-24889?
The severity of CVE-2020-24889 is high with a severity value of 7.8.
How does CVE-2020-24889 affect the software?
CVE-2020-24889 affects LibRaw version < 20.0.
How can CVE-2020-24889 be fixed?
To fix CVE-2020-24889, users should update LibRaw to a version equal to or greater than 20.0.
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/libraw
- canonical/libraw libraw