CVE-2023-1729
A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously...
A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.
- Record
CVE-2023-1729- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-119, CWE-787
- Updated
- 2026-11-02
CVE List No score
A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.
- Record
CVE-2023-1729- Weakness
- CWE-119
- Updated
- 2026-11-02
EUVDEUVD-2023-23952 No score
A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.
- Record
EUVD-2023-23952- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5gp6-9w92-5752
A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously...
A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.
- Record
GHSA-5gp6-9w92-5752- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-119, CWE-787
- Updated
- 2026-11-02
OSVALPINE-CVE-2023-1729
A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.
- Record
ALPINE-CVE-2023-1729- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSVDEBIAN-CVE-2023-1729
A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.
- Record
DEBIAN-CVE-2023-1729- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 14 moreShow less
OSVJLSEC-2026-1108
A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.
- Record
JLSEC-2026-1108- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2023-1280
LibRaw security update
LibRaw is a library for reading RAW files from digital photo cameras (CRW/CR2, NEF, RAF, etc, virtually all RAW formats are supported).It pays special attention to correct retrieval of data required for subsequent RAW conversion.The library is intended for embedding in RAW converters, data analyzers, and other programs using RAW files as the initial data.
Security Fix(es):
A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.(CVE-2023-1729)
- Record
OESA-2023-1280- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVRHSA-2024:2137
Red Hat Security Advisory: LibRaw security update
- Record
RHSA-2024:2137- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVRLSA-2024:2137
Low: LibRaw security update
LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).
Security Fix(es):
- LibRaw: a heap-buffer-overflow in raw2image_ex() (CVE-2023-1729)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.
- Record
RLSA-2024:2137- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-1729
A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.
- Record
UBUNTU-CVE-2023-1729- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2024:2137 No score
Low: LibRaw security update
LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).
Security Fix(es):
- LibRaw: a heap-buffer-overflow in raw2image_ex() (CVE-2023-1729)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2024:2137- Updated
- 2026-11-02
OSVCLSA-2025-1753801728 No score
LibRaw: Fix of CVE-2023-1729
- CVE-2023-1729: fix heap-buffer-overflow in raw2image_ex() to prevent application crash
- Record
CLSA-2025-1753801728- Updated
- 2026-11-02
OSV No score
A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.
- Record
CVE-2023-1729- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12901-1 No score
libraw-devel-0.21.1-2.1 on GA media
These are all security issues fixed in the libraw-devel-0.21.1-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12901-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:2194-1 No score
Security update for libraw
This update for libraw fixes the following issues:
- CVE-2023-1729: Fixed a heap buffer overflow when converting an image (bsc#1210720).
- Record
SUSE-SU-2023:2194-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:2195-1 No score
Security update for libraw
This update for libraw fixes the following issues:
- CVE-2023-1729: Fixed a heap buffer overflow when converting an image (bsc#1210720).
- Record
SUSE-SU-2023:2195-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:2196-1 No score
Security update for libraw
This update for libraw fixes the following issues:
- CVE-2023-1729: Fixed a heap buffer overflow when converting an image (bsc#1210720).
- Record
SUSE-SU-2023:2196-1- Updated
- 2026-11-02
OSVUSN-6137-1 No score
libraw vulnerabilities
It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, a remote attacker could cause applications linked against LibRaw to crash, resulting in a denial of service, or possibly execute arbitrary code.
- Record
USN-6137-1- Updated
- 2026-11-02
OSVUSN-7266-1 No score
digikam vulnerabilities
Zinuo Han and Ao Wang discovered that the Android DNG SDK, vendored in digiKam, did not correctly parse certain files. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2017-0691)
It was discovered that Platinum Upnp SDK, vendored in digiKam, was vulnerable to a path traversal attack. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-19858)
It was discovered that LibRaw, vendored in digiKam, did not correctly handle certain memory operations. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-22628)
It was discovered that LibRaw, vendored in digiKam, did not correctly handle certain memory operations. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-35530, CVE-2020-35531, CVE-2020-35532, CVE-2020-35533)
It was discovered that LibRaw, vendored in digiKam, did not correctly handle certain memory operations. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-32142)
It was discovered that LibRaw, vendored in digiKam, did not correctly handle certain memory operations. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-1729)
- Record
USN-7266-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
librawAlpine:v3.18 |
before 0.21.1-r1 | 0.21.1-r1 |
librawAlpine:v3.19 |
before 0.21.1-r2 | 0.21.1-r2 |
librawAlpine:v3.20 |
before 0.21.1-r2 | 0.21.1-r2 |
librawAlpine:v3.21 |
before 0.21.1-r2 | 0.21.1-r2 |
librawAlpine:v3.22 |
before 0.21.1-r2 | 0.21.1-r2 |
librawAlpine:v3.23 |
before 0.21.1-r2 | 0.21.1-r2 |
librawAlpine:v3.24 |
before 0.21.1-r2 | 0.21.1-r2 |
LibRawAlmaLinux:9 |
before 0.21.1-1.el9 | 0.21.1-1.el9 |
LibRaw-develAlmaLinux:9 |
before 0.21.1-1.el9 | 0.21.1-1.el9 |
LibRawTuxCare:AlmaLinux:9.2 |
before 0.20.2-5.el9_2.tuxcare.els2 | 0.20.2-5.el9_2.tuxcare.els2 |
Show 85 moreShow less
| Package | Affected | Fixed |
|---|---|---|
LibRaw-develTuxCare:AlmaLinux:9.2 |
before 0.20.2-5.el9_2.tuxcare.els2 | 0.20.2-5.el9_2.tuxcare.els2 |
LibRaw-samplesTuxCare:AlmaLinux:9.2 |
before 0.20.2-5.el9_2.tuxcare.els2 | 0.20.2-5.el9_2.tuxcare.els2 |
LibRaw-staticTuxCare:AlmaLinux:9.2 |
before 0.20.2-5.el9_2.tuxcare.els2 | 0.20.2-5.el9_2.tuxcare.els2 |
librawDebian:12 |
before 0.20.2-2.1 | 0.20.2-2.1 |
librawDebian:13 |
before 0.20.2-2.1 | 0.20.2-2.1 |
librawDebian:14 |
before 0.20.2-2.1 | 0.20.2-2.1 |
librawDebian:10 From an advisory covering 2 CVEs |
before 0.19.2-2+deb10u3, plus listed versions 0.19.2-20.19.2-2+deb10u10.19.2-2+deb10u2 |
0.19.2-2+deb10u3 |
librawDebian:11 From an advisory covering 2 CVEs |
before 0.20.2-1+deb11u1, plus listed versions 0.20.2-1 |
0.20.2-1+deb11u1 |
LibRaw_jllJulia |
before 0.22.1+0 | 0.22.1+0 |
LibRawopenEuler:20.03-LTS-SP1 |
before 0.20.2-5.oe1 | 0.20.2-5.oe1 |
LibRawopenEuler:20.03-LTS-SP3 |
before 0.20.2-5.oe1 | 0.20.2-5.oe1 |
LibRawopenEuler:22.03-LTS |
before 0.20.2-6.oe2203sp1 | 0.20.2-6.oe2203sp1 |
LibRawopenEuler:22.03-LTS-SP1 |
before 0.20.2-6.oe2203sp1 | 0.20.2-6.oe2203sp1 |
LibRawRed Hat:enterprise_linux:9::appstream |
before 0:0.21.1-1.el9 | 0:0.21.1-1.el9 |
LibRaw-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:0.21.1-1.el9 | 0:0.21.1-1.el9 |
LibRaw-debugsourceRed Hat:enterprise_linux:9::appstream |
before 0:0.21.1-1.el9 | 0:0.21.1-1.el9 |
LibRaw-samples-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:0.21.1-1.el9 | 0:0.21.1-1.el9 |
LibRaw-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:0.21.1-1.el9 | 0:0.21.1-1.el9 |
LibRaw-debugsourceRed Hat:enterprise_linux:9::crb |
before 0:0.21.1-1.el9 | 0:0.21.1-1.el9 |
LibRaw-develRed Hat:enterprise_linux:9::crb |
before 0:0.21.1-1.el9 | 0:0.21.1-1.el9 |
LibRaw-samples-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:0.21.1-1.el9 | 0:0.21.1-1.el9 |
LibRawRocky Linux:9 |
before 0:0.21.1-1.el9 | 0:0.21.1-1.el9 |
librawSUSE:Linux Enterprise Module for Desktop Applications 15 SP4 |
before 0.20.2-150400.3.6.1 | 0.20.2-150400.3.6.1 |
librawSUSE:Linux Enterprise Workstation Extension 15 SP4 |
before 0.20.2-150400.3.6.1 | 0.20.2-150400.3.6.1 |
librawopenSUSE:Leap 15.4 |
before 0.20.2-150400.3.6.1 | 0.20.2-150400.3.6.1 |
librawSUSE:Linux Enterprise Workstation Extension 15 SP4 |
before 0.18.9-150000.3.20.1 | 0.18.9-150000.3.20.1 |
librawopenSUSE:Leap 15.4 |
before 0.18.9-150000.3.20.1 | 0.18.9-150000.3.20.1 |
librawSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 0.15.4-39.1 | 0.15.4-39.1 |
librawSUSE:Linux Enterprise Workstation Extension 12 SP5 |
before 0.15.4-39.1 | 0.15.4-39.1 |
librawUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 0.16.2-10.17.0-10.17.1-10.17.1-1ubuntu0.10.17.1-1ubuntu0.2 Show 4 moreShow less0.17.1-1ubuntu0.30.17.1-1ubuntu0.40.17.1-1ubuntu0.50.17.1-1ubuntu0.5+esm1 |
None known |
darktableUbuntu:16.04:LTS |
All versions, plus listed versions 1.6.8-11.6.9-12.0.0-12.0.1-12.0.3-1 |
None known |
dcrawUbuntu:16.04:LTS |
All versions, plus listed versions 9.21-0.2 |
None known |
exactimageUbuntu:16.04:LTS |
All versions, plus listed versions 0.9.1-6build10.9.1-6ubuntu10.9.1-8ubuntu10.9.1-90.9.1-9build1 Show 4 moreShow less0.9.1-100.9.1-110.9.1-120.9.1-12ubuntu1 |
None known |
kodiUbuntu:16.04:LTS |
All versions, plus listed versions 15.1+dfsg1-315.2+dfsg1-1build115.2+dfsg1-315.2+dfsg1-3ubuntu115.2+dfsg1-3ubuntu1.1 |
None known |
rawtherapeeUbuntu:16.04:LTS |
All versions, plus listed versions 4.2-2build14.2-4 |
None known |
ufrawUbuntu:16.04:LTS |
All versions, plus listed versions 0.20-3build1 |
None known |
librawUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 0.18.2-20.18.5-10.18.7-20.18.8-10.18.8-1ubuntu0.1 Show 4 moreShow less0.18.8-1ubuntu0.20.18.8-1ubuntu0.30.18.8-1ubuntu0.40.18.8-1ubuntu0.4+esm1 |
None known |
darktableUbuntu:18.04:LTS |
All versions, plus listed versions 2.2.5-22.4.0-12.4.1-12.4.2-1 |
None known |
dcrawUbuntu:18.04:LTS |
All versions, plus listed versions 9.27-1ubuntu1 |
None known |
digikamUbuntu:Pro:18.04:LTS |
before 4:5.6.0-0ubuntu10+esm1, plus listed versions 4:5.6.0-0ubuntu24:5.6.0-0ubuntu34:5.6.0-0ubuntu44:5.6.0-0ubuntu74:5.6.0-0ubuntu84:5.6.0-0ubuntu94:5.6.0-0ubuntu10 |
4:5.6.0-0ubuntu10+esm1 |
exactimageUbuntu:18.04:LTS |
All versions, plus listed versions 0.9.2-1build11.0.1-1 |
None known |
kodiUbuntu:18.04:LTS |
All versions, plus listed versions 2:17.3+dfsg1-32:17.3+dfsg1-3build12:17.3+dfsg1-52:17.3+dfsg1-5build12:17.3+dfsg1-5build22:17.6+dfsg1-12:17.6+dfsg1-1build12:17.6+dfsg1-1ubuntu1 |
None known |
rawtherapeeUbuntu:18.04:LTS |
All versions, plus listed versions 5.2-15.3-1 |
None known |
ufrawUbuntu:18.04:LTS |
All versions, plus listed versions 0.22-1.10.22-20.22-30.22-3.1~build0.18.04.10.22-3.1ubuntu0.1 |
None known |
librawUbuntu:20.04:LTS |
before 0.19.5-1ubuntu1.2, plus listed versions 0.19.5-10.19.5-1ubuntu10.19.5-1ubuntu1.1 |
0.19.5-1ubuntu1.2 |
darktableUbuntu:20.04:LTS |
All versions, plus listed versions 2.6.0-12.6.2-32.6.3-12.6.3-1build12.6.3-1build23.0.1-0ubuntu1 |
None known |
dcrawUbuntu:20.04:LTS |
All versions, plus listed versions 9.28-2 |
None known |
digikamUbuntu:Pro:20.04:LTS |
before 4:6.4.0+dfsg-3ubuntu0.1~esm1, plus listed versions 4:5.9.0-1ubuntu44:6.4.0+dfsg-34:6.4.0+dfsg-3build1 |
4:6.4.0+dfsg-3ubuntu0.1~esm1 |
exactimageUbuntu:20.04:LTS |
All versions, plus listed versions 1.0.2-31.0.2-5ubuntu11.0.2-5ubuntu21.0.2-7ubuntu11.0.2-7ubuntu2 |
None known |
kodiUbuntu:20.04:LTS |
All versions, plus listed versions 2:17.6+dfsg1-4ubuntu42:17.6+dfsg1-4ubuntu92:17.6+dfsg1-4ubuntu102:18.5+dfsg1-0ubuntu32:18.6+dfsg1-2ubuntu1 |
None known |
rawtherapeeUbuntu:20.04:LTS |
All versions, plus listed versions 5.6-15.7-15.8-1 |
None known |
darktableUbuntu:22.04:LTS |
All versions, plus listed versions 3.6.0-0ubuntu13.8.0-23.8.0-33.8.0-3build13.8.0-3build23.8.1-13.8.1-2 |
None known |
dcrawUbuntu:22.04:LTS |
All versions, plus listed versions 9.28-29.28-3 |
None known |
exactimageUbuntu:22.04:LTS |
All versions, plus listed versions 1.0.2-81.0.2-8build11.0.2-8build21.0.2-8build3 |
None known |
kodiUbuntu:22.04:LTS |
All versions, plus listed versions 2:19.1+dfsg2-22:19.3+dfsg1-12:19.3+dfsg1-1build22:19.3+dfsg1-1build32:19.3+dfsg1-1build42:19.3+dfsg1-1build52:19.4+dfsg1-2 |
None known |
librawUbuntu:22.04:LTS |
before 0.20.2-2ubuntu2.22.04.1, plus listed versions 0.20.2-1ubuntu30.20.2-2ubuntu10.20.2-2ubuntu2 |
0.20.2-2ubuntu2.22.04.1 |
rawtherapeeUbuntu:22.04:LTS |
All versions, plus listed versions 5.8-3 |
None known |
digikamUbuntu:Pro:22.04:LTS |
before 4:7.5.0-3ubuntu0.1~esm1, plus listed versions 4:7.1.0-24:7.1.0-2ubuntu14:7.4.0-0ubuntu14:7.5.0-0ubuntu14:7.5.0-3fakesync1 |
4:7.5.0-3ubuntu0.1~esm1 |
darktableUbuntu:24.04:LTS |
All versions, plus listed versions 4.4.2-1ubuntu14.4.2-1ubuntu24.4.2-1.14.4.2-1.1build14.6.1-24.6.1-2build34.6.1-2build44.6.1-2ubuntu1 |
None known |
dcrawUbuntu:24.04:LTS |
All versions, plus listed versions 9.28-39.28-3.1ubuntu19.28-5ubuntu1 |
None known |
exactimageUbuntu:24.04:LTS |
All versions, plus listed versions 1.0.2-11build21.0.2-11build31.0.2-11build41.0.2-11build71.0.2-11build81.0.2-11build9 |
None known |
kodiUbuntu:24.04:LTS |
All versions, plus listed versions 2:20.2+dfsg-42:20.2+dfsg-4build12:20.2+dfsg-4build22:20.2+dfsg-4ubuntu12:20.3+dfsg-12:20.4+dfsg-12:20.5+dfsg-1build22:20.5+dfsg-1ubuntu1 |
None known |
rawtherapeeUbuntu:24.04:LTS |
All versions, plus listed versions 5.9-1build15.9-25.10-15.10-1build35.10-1build4 |
None known |
darktableUbuntu:25.10 |
All versions, plus listed versions 5.0.1-0ubuntu15.0.1-0ubuntu25.0.1-15.0.1-2 |
None known |
dcrawUbuntu:25.10 |
All versions, plus listed versions 9.28-8 |
None known |
exactimageUbuntu:25.10 |
All versions, plus listed versions 1.2.1-2 |
None known |
kodiUbuntu:25.10 |
All versions, plus listed versions 2:21.2+dfsg-1build22:21.2+dfsg-42:21.2+dfsg-4build12:21.2+dfsg-4build2 |
None known |
rawtherapeeUbuntu:25.10 |
All versions, plus listed versions 5.11-2build2 |
None known |
darktableUbuntu:26.10 |
All versions, plus listed versions 5.4.1-15.4.1-1build15.4.1-1build2 |
None known |
dcrawUbuntu:26.10 |
All versions, plus listed versions 9.28-8build1 |
None known |
exactimageUbuntu:26.10 |
All versions, plus listed versions 1.2.1-2build21.2.1-3build11.2.1-3build2 |
None known |
kodiUbuntu:26.10 |
All versions, plus listed versions 2:21.3+dfsg-1ubuntu12:21.3+dfsg-1.2 |
None known |
rawtherapeeUbuntu:26.10 |
All versions, plus listed versions 5.12-25.12-2build1 |
None known |
darktableUbuntu:26.04:LTS |
All versions, plus listed versions 5.0.1-25.2.1-15.2.1-1build15.2.1-1build25.4.0-15.4.1-1 |
None known |
dcrawUbuntu:26.04:LTS |
All versions, plus listed versions 9.28-89.28-8build1 |
None known |
exactimageUbuntu:26.04:LTS |
All versions, plus listed versions 1.2.1-21.2.1-2build11.2.1-2build2 |
None known |
kodiUbuntu:26.04:LTS |
All versions, plus listed versions 2:21.2+dfsg-4build22:21.2+dfsg-4build32:21.2+dfsg-52:21.3+dfsg-12:21.3+dfsg-1build12:21.3+dfsg-1ubuntu1 |
None known |
rawtherapeeUbuntu:26.04:LTS |
All versions, plus listed versions 5.11-2build25.12-15.12-2 |
None known |
librawUbuntu:20.04:LTS From an advisory covering 2 CVEs |
before 0.19.5-1ubuntu1.2, plus listed versions 0.19.5-10.19.5-1ubuntu10.19.5-1ubuntu1.1 |
0.19.5-1ubuntu1.2 |
librawUbuntu:22.04:LTS From an advisory covering 2 CVEs |
before 0.20.2-2ubuntu2.22.04.1, plus listed versions 0.20.2-1ubuntu30.20.2-2ubuntu10.20.2-2ubuntu2 |
0.20.2-2ubuntu2.22.04.1 |
digikamUbuntu:Pro:16.04:LTS From an advisory covering 9 CVEs |
before 4:4.12.0-0ubuntu7+esm1, plus listed versions 4:4.12.0-0ubuntu54:4.12.0-0ubuntu64:4.12.0-0ubuntu7 |
4:4.12.0-0ubuntu7+esm1 |
digikamUbuntu:Pro:18.04:LTS From an advisory covering 9 CVEs |
before 4:5.6.0-0ubuntu10+esm1, plus listed versions 4:5.6.0-0ubuntu24:5.6.0-0ubuntu34:5.6.0-0ubuntu44:5.6.0-0ubuntu74:5.6.0-0ubuntu84:5.6.0-0ubuntu94:5.6.0-0ubuntu10 |
4:5.6.0-0ubuntu10+esm1 |
digikamUbuntu:Pro:20.04:LTS From an advisory covering 9 CVEs |
before 4:6.4.0+dfsg-3ubuntu0.1~esm1, plus listed versions 4:5.9.0-1ubuntu44:6.4.0+dfsg-34:6.4.0+dfsg-3build1 |
4:6.4.0+dfsg-3ubuntu0.1~esm1 |
digikamUbuntu:Pro:22.04:LTS From an advisory covering 9 CVEs |
before 4:7.5.0-3ubuntu0.1~esm1, plus listed versions 4:7.1.0-24:7.1.0-2ubuntu14:7.4.0-0ubuntu14:7.5.0-0ubuntu14:7.5.0-3fakesync1 |
4:7.5.0-3ubuntu0.1~esm1 |
librawopenSUSE:Tumbleweed |
before 0.21.1-2.1 | 0.21.1-2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-1729 is a medium vulnerability (CVSS 6.5) in Libraw, published May 15, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.29%, the 70th percentile. Fixed in libraw 0.21.1-r1.
References
github.com/LibRaw/LibRaw/issues/557
bugzilla.redhat.com/show_bug.cgi?id=2188240
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E5ZJ3UBTJBZHNPJQFOSGM5L7WAHHE2GY
lists.debian.org/debian-lts-announce/2023/05/msg00025.html
debian.org/security/2023/dsa-5412
Show 36 moreShow less
security.gentoo.org/glsa/202312-08
nvd.nist.gov/vuln/detail/CVE-2023-1729
security.alpinelinux.org/vuln/CVE-2023-1729
access.redhat.com/errata/RHSA-2024:2137
errata.almalinux.org/9/ALSA-2024-2137.html
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1753801728.html
security-tracker.debian.org/tracker/CVE-2023-1729
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1280
issues.redhat.com/browse/RHEL-768
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2137.json
cve.org/CVERecord?id=CVE-2023-1729
errata.rockylinux.org/RLSA-2024:2137
suse.com/support/update/announcement/2023/suse-su-20232194-1
bugzilla.suse.com/1210720
ubuntu.com/security/CVE-2023-1729