{"id":"CVE-2015-3885","aliases":["DEBIAN-CVE-2015-3885","DLA-228-1","DLA-243-1","DSA-3692-1","EUVD-2015-3920","GHSA-gxxm-8rj8-v8q7","MGASA-2015-0222","MGASA-2015-0224","MGASA-2015-0225","MGASA-2015-0226","MGASA-2015-0230","MGASA-2016-0373","SUSE-SU-2017:2300-1","SUSE-SU-2025:1380-1","UBUNTU-CVE-2015-3885","USN-3492-1","openSUSE-SU-2024:10478-1","openSUSE-SU-2024:10588-1"],"status":"published","title":"Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to...","description":"Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service (crash) via a crafted image, which triggers a buffer overflow, related to the len variable.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0544,"percentile":0.92781,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-189"],"published":"2015-05-13T17:18:54Z","modified":"2026-10-09T17:00:06Z","fixes":[{"ecosystem":"Debian:12","package":"darktable","fixed_in":["1.6.7-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"darktable","fixed_in":["1.6.7-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"darktable","fixed_in":["1.6.7-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"dcraw","fixed_in":["9.26-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"dcraw","fixed_in":["9.26-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"dcraw","fixed_in":["9.26-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"exactimage","fixed_in":["0.9.1-5"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"exactimage","fixed_in":["0.9.1-5"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"exactimage","fixed_in":["0.9.1-5"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"freeimage","fixed_in":["3.15.4-6"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"freeimage","fixed_in":["3.15.4-6"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"kodi","fixed_in":["16.0+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"kodi","fixed_in":["16.0+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"kodi","fixed_in":["16.0+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libraw","fixed_in":["0.16.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libraw","fixed_in":["0.16.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libraw","fixed_in":["0.16.2-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"rawtherapee","fixed_in":["4.2-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"rawtherapee","fixed_in":["4.2-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"rawtherapee","fixed_in":["4.2-2"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"exactimage","fixed_in":["0.8.1-3+deb6u4"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"libraw","fixed_in":["0.9.1-1+deb6u1"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"darktable","fixed_in":["1.2.3-4.3.mga4"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"libraw","fixed_in":["0.15.4-2.1.mga4"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"dcraw","fixed_in":["9.19-3.1.mga4"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"ufraw","fixed_in":["0.19.2-5.1.mga4"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"rawtherapee","fixed_in":["4.0.11-2.2.mga4"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"xbmc","fixed_in":["12.3-1.3.mga4"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libraw","fixed_in":["0.15.4-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"freeimage","fixed_in":["3.15.4-3ubuntu0.1+esm2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"rawtherapee","fixed_in":["5.8-5.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"darktable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.7-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"darktable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.7-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"darktable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.7-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"dcraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"dcraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"dcraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"exactimage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.1-5"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"exactimage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.1-5"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"exactimage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.1-5"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"freeimage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15.4-6"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"freeimage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15.4-6"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.0+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.0+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.0+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.2-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"rawtherapee","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"rawtherapee","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"rawtherapee","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2-2"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"exactimage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.1-3+deb6u4"}]}],"versions":["0.8.1-3"]},{"source":"osv","ecosystem":"Debian:6.0","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.1-1+deb6u1"}]}],"versions":["0.9.1-1"]},{"source":"osv","ecosystem":"Debian:8","package":"freeimage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15.4-4.2+deb8u1"}]}],"versions":["3.15.4-4.1","3.15.4-4.2"],"bundled":2},{"source":"osv","ecosystem":"Mageia:4","package":"darktable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-4.3.mga4"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.4-2.1.mga4"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"dcraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.19-3.1.mga4"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"ufraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.2-5.1.mga4"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"rawtherapee","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.11-2.2.mga4"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"xbmc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3-1.3.mga4"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"freeimage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.154-1.2.mga5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.4-9.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.4-9.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.4-9.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.4-9.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP2","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.4-9.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.4-9.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.4-45.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.4-1ubuntu0.1"}]}],"versions":["0.15.3-1ubuntu1","0.15.4-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"freeimage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15.4-3ubuntu0.1+esm2"}]}],"versions":["3.15.1-2build1","3.15.1-2build2","3.15.4-2","3.15.4-3","3.15.4-3ubuntu0.1","3.15.4-3ubuntu0.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"dcraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.21-0.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["15.1+dfsg1-3","15.2+dfsg1-1build1","15.2+dfsg1-3","15.2+dfsg1-3ubuntu1","15.2+dfsg1-3ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:20.2+dfsg-4","2:20.2+dfsg-4build1","2:20.2+dfsg-4build2","2:20.2+dfsg-4ubuntu1","2:20.3+dfsg-1","2:20.4+dfsg-1","2:20.5+dfsg-1build2","2:20.5+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:21.2+dfsg-4build2","2:21.2+dfsg-4build3","2:21.2+dfsg-5","2:21.3+dfsg-1","2:21.3+dfsg-1build1","2:21.3+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.4-1ubuntu0.1"}]}],"versions":["0.15.3-1ubuntu1","0.15.4-1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.1-1ubuntu0.1"}]}],"versions":["0.16.2-1","0.17.0-1","0.17.1-1"],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rawtherapee","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-5.1"}]}]}],"products":[{"vendor":"dcraw_project","product":"dcraw"},{"vendor":"fedoraproject","product":"fedora"}],"references":[{"url":"http://www.securityfocus.com/bid/74590","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/201706-17","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://github.com/LibRaw/LibRaw/commit/4606c28f494a750892c5c1ac7903e62dd1c6fdb5","tags":["x_refsource_CONFIRM","x_transferred","fix"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159083.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159469.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/201701-54","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159518.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159625.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162084.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159665.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159579.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159479.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://www.securityfocus.com/archive/1/535513/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159123.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://www.ocert.org/advisories/ocert-2015-006.html","tags":["x_refsource_MISC","x_transferred","US Government Resource","advisory","report"]},{"url":"https://github.com/rawstudio/rawstudio/commit/983bda1f0fa5fa86884381208274198a620f006e","tags":["x_refsource_CONFIRM","x_transferred","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3885"},{"url":"https://github.com/advisories/GHSA-gxxm-8rj8-v8q7"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-3885","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0222.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15915","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15910","tags":["report"]},{"url":"http://openwall.com/lists/oss-security/2015/05/12/8","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2015-0224.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15925","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2015-0225.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15926","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2015-0226.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15927","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2015-0230.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15928","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2016-0373.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19547","tags":["report"]},{"url":"http://www.talosintelligence.com/reports/TALOS-2016-0189/","tags":["web"]},{"url":"http://lwn.net/Articles/703585/","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172300-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1039209","tags":["report"]},{"url":"https://bugzilla.suse.com/1039210","tags":["report"]},{"url":"https://bugzilla.suse.com/1039379","tags":["report"]},{"url":"https://bugzilla.suse.com/1039380","tags":["report"]},{"url":"https://bugzilla.suse.com/930683","tags":["report"]},{"url":"https://bugzilla.suse.com/957517","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6899","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251380-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1241584","tags":["report"]},{"url":"https://bugzilla.suse.com/1241585","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43964","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-3885","tags":["report"]},{"url":"https://codesearch.debian.net/results/int%20CLASS%20ljpeg_start","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3492-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3885","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-8366","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-8367","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-6886","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-6887","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13735","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14265","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14348","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14608","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2015-3885","description":"Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service (crash) via a crafted image, which triggers a buffer overflow, related to the len variable.","status":"published","published":"2015-05-19T18:00:00Z","modified":"2024-08-06T05:56:16.33Z","updated_at":"2026-11-02T14:35:41.976732Z"}],"euvd":[{"id":"EUVD-2015-3920","description":"Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service (crash) via a crafted image, which triggers a buffer overflow, related to the len variable.","status":"published","published":"2015-05-19T18:00:00Z","modified":"2024-08-06T05:56:16Z","updated_at":"2026-11-03T02:22:06.212182Z"}],"ghsa":[{"id":"GHSA-gxxm-8rj8-v8q7","title":"Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to...","description":"Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service (crash) via a crafted image, which triggers a buffer overflow, related to the len variable.","status":"published","published":"2022-05-14T02:48:34Z","modified":"2023-02-02T05:06:58Z","updated_at":"2026-11-02T14:52:24.271651Z"}],"nvd":[{"id":"CVE-2015-3885","description":"Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service (crash) via a crafted image, which triggers a buffer overflow, related to the len variable.","status":"published","published":"2015-05-19T18:59:07.277Z","modified":"2026-06-17T00:26:27.213Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:03:04.906059Z"}],"osv":[{"id":"CVE-2015-3885","description":"Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service (crash) via a crafted image, which triggers a buffer overflow, related to the len variable.","status":"published","published":"2015-05-19T18:59:07Z","modified":"2026-04-16T06:15:39.320323842Z","updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-3885","description":"Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service (crash) via a crafted image, which triggers a buffer overflow, related to the len variable.","status":"published","published":"2015-05-19T18:59:07.277Z","modified":"2026-10-09T17:00:06.657449824Z","updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"DLA-228-1","title":"exactimage - security update","status":"published","published":"2015-05-27T00:00:00Z","modified":"2026-03-09T01:20:31.713647Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-243-1","title":"libraw - security update","status":"published","published":"2015-06-10T00:00:00Z","modified":"2026-03-09T01:21:27.457236Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-3692-1","title":"freeimage - security update","status":"published","published":"2016-10-13T00:00:00Z","modified":"2026-03-09T01:17:46.555903Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2015-0222","title":"Updated darktable packages fix CVE-2015-3885","description":"Updated darktable package fixes security vulnerability\n\nThe dcraw tool bundled in darktable's libraw copy suffers from an integer\noverflow condition which leads to a buffer overflow. A maliciously crafted\nraw image file can be used to trigger the vulnerability, causing a Denial\nof Service condition.\n\nThe bundled dcraw code has been patched to fix this vulnerability.\n","status":"published","published":"2015-05-13T17:18:54Z","modified":"2026-04-16T06:23:20.904207201Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"MGASA-2015-0224","title":"Updated libraw packages fix CVE-2015-3885","description":"Updated libraw packages fix security vulnerability:\n\nThe dcraw tool suffers from an integer overflow condition which lead to a\nbuffer overflow. The vulnerability concerns the 'len' variable, parsed without\nvalidation from opened images, used in the ljpeg_start() function. A\nmaliciously crafted raw image file can be used to trigger the vulnerability,\ncausing a Denial of Service condition (CVE-2015-3885).\n\nLibRaw contains a bundled copy of the affected code.  The libraw package has\nbeen patched to fix this issue.\n","status":"published","published":"2015-05-13T17:18:54Z","modified":"2026-04-16T06:25:59.088625132Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"MGASA-2015-0225","title":"Updated ufraw \u0026 dcraw packages fix CVE-2015-3885","description":"Updated dcraw and ufraw packages fix security vulnerability:\n\nThe dcraw tool suffers from an integer overflow condition which lead to a\nbuffer overflow. The vulnerability concerns the 'len' variable, parsed without\nvalidation from opened images, used in the ljpeg_start() function. A\nmaliciously crafted raw image file can be used to trigger the vulnerability,\ncausing a Denial of Service condition (CVE-2015-3885).\n\nThe ufraw package also contains the affected code.  The dcraw and ufraw\npackages have been patched to fix this issue.\n","status":"published","published":"2015-05-13T17:18:54Z","modified":"2026-04-16T06:23:20.129345385Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"MGASA-2015-0226","title":"Updated rawtherapee packages fix CVE-2015-3885","description":"Updated rawtherapee package fixes security vulnerability:\n\nThe dcraw tool suffers from an integer overflow condition which lead to a\nbuffer overflow. The vulnerability concerns the 'len' variable, parsed without\nvalidation from opened images, used in the ljpeg_start() function. A\nmaliciously crafted raw image file can be used to trigger the vulnerability,\ncausing a Denial of Service condition (CVE-2015-3885).\n\nThe rawtherapee package contains a bundled copy of the affected code and has\nbeen patched to fix this issue.\n","status":"published","published":"2015-05-13T17:18:54Z","modified":"2026-04-16T06:22:31.603793879Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"MGASA-2015-0230","title":"Updated xbmc packages fix CVE-2015-3885","description":"Updated xbmc package fixes security vulnerability:\n\nThe dcraw tool suffers from an integer overflow condition which lead to a\nbuffer overflow. The vulnerability concerns the 'len' variable, parsed without\nvalidation from opened images, used in the ljpeg_start() function. A\nmaliciously crafted raw image file can be used to trigger the vulnerability,\ncausing a Denial of Service condition (CVE-2015-3885).\n\nThe xbmc package contains a bundled copy of the affected code and has been\npatched to fix this issue.\n","status":"published","published":"2015-05-18T19:08:05Z","modified":"2026-04-16T06:22:35.405225874Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"MGASA-2016-0373","title":"Updated freeimage packages fix security vulnerability","description":"Multiple vulnerabilities were discovered in the FreeImage multimedia\nlibrary, which might result in denial of service or the execution of\narbitrary code if a malformed XMP or RAW image is processed.\n(CVE-2015-3885, CVE-2016-5684)\n","status":"published","published":"2016-11-10T22:23:34Z","modified":"2026-04-16T06:24:40.639361067Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2024:10478-1","title":"darktable-2.0.7-1.1 on GA media","description":"These are all security issues fixed in the darktable-2.0.7-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:35:04.368127Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:10588-1","title":"rawtherapee-5.8-5.1 on GA media","description":"These are all security issues fixed in the rawtherapee-5.8-5.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:01:14.953465Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2017:2300-1","title":"Security update for libraw","description":"This update for libraw fixes the following issues:\n\n- CVE-2015-3885: A specially crafted raw image file could have caused a Denial of Service\n  through an integer overflow. (bsc#930683)\n\n- CVE-2015-8367: The function phase_one_correct() did not handle memory object initialization\n  correctly, which may have caused some other problems. (bsc#957517)\n\n- CVE-2017-6886: memory corruption in parse_tiff_ifd() func (internal/dcraw_common.cpp) could lead to Denial of service (bsc#1039380)\n\n- CVE-2017-6889: integer overflow error within the 'foveon_load_camf()' function (dcraw_foveon.c) could lead to Denial of service (bsc#1039210)\n\n- CVE-2017-6890: boundary error within the 'foveon_load_camf()' function (dcraw_foveon.c) (bsc#1039209)\n\n","status":"published","published":"2017-08-30T13:16:37Z","modified":"2026-02-04T03:35:58.613781Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2025:1380-1","title":"Security update for libraw","description":"This update for libraw fixes the following issues:\n\n- CVE-2025-43962: Fixed out-of-bounds read when tag 0x412 processing in phase_one_correct function (bsc#1241585)\n- CVE-2025-43964: Fixed tag 0x412 processing in phase_one_correct  does not enforce minimum w0 and w1 values (bsc#1241584)\n","status":"published","published":"2025-04-28T07:36:42Z","modified":"2026-02-04T04:41:02.306231Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"UBUNTU-CVE-2015-3885","description":"Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service (crash) via a crafted image, which triggers a buffer overflow, related to the len variable.","status":"published","published":"2015-05-19T00:00:00Z","modified":"2026-05-20T16:03:11.388403096Z","updated_at":"2026-11-02T15:54:10.045446Z"},{"id":"USN-3492-1","title":"libraw vulnerabilities","description":"It was discovered that LibRaw incorrectly handled photo files. If a user or\nautomated system were tricked into processing a specially crafted photo\nfile, a remote attacker could cause applications linked against LibRaw\nto crash, resulting in a denial of service, or possibly execute arbitrary\ncode\n","status":"published","published":"2017-11-22T18:27:06Z","modified":"2026-04-27T15:17:44.626411Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}