medium5.5
CVE-2020-35535
In LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF()" function (libraw\src\metadata\sony.cpp) when processing srf files.
Impact
In LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF()" function (libraw\src\metadata\sony.cpp) when processing srf files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libraw | Libraw | Versions 0.20.0, 0.20.1, 0.20.2, 0.21.0 |