An error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause an out-of-bounds read memory access and subsequently cause a crash.
The product reads data past the end, or before the beginning, of the intended buffer.
| Link | Tags |
|---|---|
| https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt | third party advisory release notes |
| https://secuniaresearch.flexerasoftware.com/secunia_research/2018-10/ | third party advisory permissions required |
| https://secuniaresearch.flexerasoftware.com/advisories/81800/ | third party advisory |
| https://github.com/LibRaw/LibRaw/commit/fd6330292501983ac75fe4162275794b18445bd9 | third party advisory patch |
| https://usn.ubuntu.com/3838-1/ | third party advisory vendor advisory |