Description (CNA)
There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code may be executed in the victim's system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / dcraw | affected dcraw 9.28-2 |
CWE
CWE-20
References
ADP enrichment
No English description supplied.