CVE-2020-35533: Medium severity Libraw Libraw vulnerability
In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobecopypixel()" function (libraw\src\decoders\dng.cpp) when reading data from the image file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/librawto a version that resolves this vulnerability.Fixed in 0.20.2-1+deb11u1Fixed in 0.20.2-2.1Fixed in 0.21.3-1 - Upgrade
Upgrade
alpine/librawto a version that resolves this vulnerability.Fixed in 0.20.0-r0
Event History
Frequently Asked Questions
What is CVE-2020-35533?
CVE-2020-35533 is an out-of-bounds read vulnerability in the LibRaw library.
How severe is CVE-2020-35533?
CVE-2020-35533 has a severity rating of 5.5 (medium).
Which software versions are affected by CVE-2020-35533?
CVE-2020-35533 affects versions 0.20.0, 0.20.0-rc2, 0.20.1, 0.20.2, and 0.21.0-beta1 of the LibRaw library.
How can I fix CVE-2020-35533?
To fix CVE-2020-35533, users should update to a patched version of the LibRaw library.
Where can I find more information about CVE-2020-35533?
You can find more information about CVE-2020-35533 on the official LibRaw GitHub repository and the Debian LTS announcement.