high7.8
CVE-2021-3624
There is an integer overflow vulnerability in dcraw.
Impact
There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code may be executed in the victim's system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dcraw Project | Dcraw | Version 9.28-2 |
| Debian | Debian Linux | Versions 9.0, 10.0, 11.0 |