A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
| Vendor | Product | Versions |
|---|---|---|
| libraw | libraw | Commit 0b56545, Commit d20315b |
Updated exploit availability to true, marked as actively exploited, and added patch version 0.22.1.
Initial creation
