p PatchFirst

CVE-2013-2126

CVE-2013-2126

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed full-color (1) Foveon or (2) sRAW image file.

EPSS 4.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • darktable Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.2.1-2

    Update to 1.2.1-2

  • darktable Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.2.1-2

    Update to 1.2.1-2

  • darktable Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.2.1-2

    Update to 1.2.1-2

  • libkdcraw Debian:13

    Affected ranges
    • ECOSYSTEM: < 24.12.0-1

    Update to 24.12.0-1

  • libkdcraw Debian:14

    Affected ranges
    • ECOSYSTEM: < 24.12.0-1

    Update to 24.12.0-1

  • libraw Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.15.3-1

    Update to 0.15.3-1

  • libraw Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.15.3-1

    Update to 0.15.3-1

  • libraw Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.15.3-1

    Update to 0.15.3-1

Original sources

Check your server →