{"id":"CVE-2023-1729","aliases":["ALPINE-CVE-2023-1729","ALSA-2024:2137","CLSA-2025-1753801728","DEBIAN-CVE-2023-1729","DLA-3433-1","DSA-5412-1","EUVD-2023-23952","GHSA-5gp6-9w92-5752","JLSEC-2026-1108","OESA-2023-1280","RHSA-2024:2137","RLSA-2024:2137","SUSE-SU-2023:2194-1","SUSE-SU-2023:2195-1","SUSE-SU-2023:2196-1","UBUNTU-CVE-2023-1729","USN-6137-1","USN-7266-1","openSUSE-SU-2024:12901-1"],"status":"published","title":"A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously...","description":"A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01289,"percentile":0.70422,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-787"],"published":"2023-05-15T00:00:00Z","modified":"2026-11-03T06:32:42Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"libraw","fixed_in":["0.21.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libraw","fixed_in":["0.21.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libraw","fixed_in":["0.21.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libraw","fixed_in":["0.21.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libraw","fixed_in":["0.21.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libraw","fixed_in":["0.21.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libraw","fixed_in":["0.21.1-r2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"LibRaw","fixed_in":["0.21.1-1.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"LibRaw-devel","fixed_in":["0.21.1-1.el9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"LibRaw","fixed_in":["0.20.2-5.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"LibRaw-devel","fixed_in":["0.20.2-5.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"LibRaw-samples","fixed_in":["0.20.2-5.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"LibRaw-static","fixed_in":["0.20.2-5.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libraw","fixed_in":["0.20.2-2.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libraw","fixed_in":["0.20.2-2.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libraw","fixed_in":["0.20.2-2.1"],"sources":["osv"]},{"ecosystem":"Julia","package":"LibRaw_jll","fixed_in":["0.22.1+0"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"LibRaw","fixed_in":["0.20.2-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"LibRaw","fixed_in":["0.20.2-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"LibRaw","fixed_in":["0.20.2-6.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"LibRaw","fixed_in":["0.20.2-6.oe2203sp1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"LibRaw","fixed_in":["0:0.21.1-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"LibRaw-debuginfo","fixed_in":["0:0.21.1-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"LibRaw-debugsource","fixed_in":["0:0.21.1-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"LibRaw-samples-debuginfo","fixed_in":["0:0.21.1-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"LibRaw-debuginfo","fixed_in":["0:0.21.1-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"LibRaw-debugsource","fixed_in":["0:0.21.1-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"LibRaw-devel","fixed_in":["0:0.21.1-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"LibRaw-samples-debuginfo","fixed_in":["0:0.21.1-1.el9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"LibRaw","fixed_in":["0:0.21.1-1.el9"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"libraw","fixed_in":["0.20.2-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP4","package":"libraw","fixed_in":["0.20.2-150400.3.6.1","0.18.9-150000.3.20.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"libraw","fixed_in":["0.20.2-150400.3.6.1","0.18.9-150000.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libraw","fixed_in":["0.15.4-39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"libraw","fixed_in":["0.15.4-39.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"digikam","fixed_in":["4:5.6.0-0ubuntu10+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libraw","fixed_in":["0.19.5-1ubuntu1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"digikam","fixed_in":["4:6.4.0+dfsg-3ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libraw","fixed_in":["0.20.2-2ubuntu2.22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"digikam","fixed_in":["4:7.5.0-3ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libraw","fixed_in":["0.21.1-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.1-r2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"LibRaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.1-1.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"LibRaw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.1-1.el9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"LibRaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.2-5.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"LibRaw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.2-5.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"LibRaw-samples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.2-5.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"LibRaw-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.2-5.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.2-2.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.2-2.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.2-2.1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.2-2+deb10u3"}]}],"versions":["0.19.2-2","0.19.2-2+deb10u1","0.19.2-2+deb10u2"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.2-1+deb11u1"}]}],"versions":["0.20.2-1"],"bundled":2},{"source":"osv","ecosystem":"Julia","package":"LibRaw_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.22.1+0"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"LibRaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.2-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"LibRaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.2-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"LibRaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.2-6.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"LibRaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.2-6.oe2203sp1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"LibRaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.21.1-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"LibRaw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.21.1-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"LibRaw-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.21.1-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"LibRaw-samples-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.21.1-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"LibRaw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.21.1-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"LibRaw-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.21.1-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"LibRaw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.21.1-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"LibRaw-samples-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.21.1-1.el9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"LibRaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.21.1-1.el9"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.2-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP4","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.2-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.2-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP4","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.9-150000.3.20.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.9-150000.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.4-39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.4-39.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.16.2-1","0.17.0-1","0.17.1-1","0.17.1-1ubuntu0.1","0.17.1-1ubuntu0.2","0.17.1-1ubuntu0.3","0.17.1-1ubuntu0.4","0.17.1-1ubuntu0.5","0.17.1-1ubuntu0.5+esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"darktable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6.8-1","1.6.9-1","2.0.0-1","2.0.1-1","2.0.3-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"dcraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.21-0.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"exactimage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9.1-6build1","0.9.1-6ubuntu1","0.9.1-8ubuntu1","0.9.1-9","0.9.1-9build1","0.9.1-10","0.9.1-11","0.9.1-12","0.9.1-12ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["15.1+dfsg1-3","15.2+dfsg1-1build1","15.2+dfsg1-3","15.2+dfsg1-3ubuntu1","15.2+dfsg1-3ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"rawtherapee","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.2-2build1","4.2-4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ufraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.20-3build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.18.2-2","0.18.5-1","0.18.7-2","0.18.8-1","0.18.8-1ubuntu0.1","0.18.8-1ubuntu0.2","0.18.8-1ubuntu0.3","0.18.8-1ubuntu0.4","0.18.8-1ubuntu0.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"darktable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.5-2","2.4.0-1","2.4.1-1","2.4.2-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"dcraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.27-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"digikam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.6.0-0ubuntu10+esm1"}]}],"versions":["4:5.6.0-0ubuntu2","4:5.6.0-0ubuntu3","4:5.6.0-0ubuntu4","4:5.6.0-0ubuntu7","4:5.6.0-0ubuntu8","4:5.6.0-0ubuntu9","4:5.6.0-0ubuntu10"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"exactimage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9.2-1build1","1.0.1-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:17.3+dfsg1-3","2:17.3+dfsg1-3build1","2:17.3+dfsg1-5","2:17.3+dfsg1-5build1","2:17.3+dfsg1-5build2","2:17.6+dfsg1-1","2:17.6+dfsg1-1build1","2:17.6+dfsg1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"rawtherapee","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2-1","5.3-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ufraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.22-1.1","0.22-2","0.22-3","0.22-3.1~build0.18.04.1","0.22-3.1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.5-1ubuntu1.2"}]}],"versions":["0.19.5-1","0.19.5-1ubuntu1","0.19.5-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"darktable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.6.0-1","2.6.2-3","2.6.3-1","2.6.3-1build1","2.6.3-1build2","3.0.1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"dcraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.28-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"digikam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:6.4.0+dfsg-3ubuntu0.1~esm1"}]}],"versions":["4:5.9.0-1ubuntu4","4:6.4.0+dfsg-3","4:6.4.0+dfsg-3build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"exactimage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.2-3","1.0.2-5ubuntu1","1.0.2-5ubuntu2","1.0.2-7ubuntu1","1.0.2-7ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:17.6+dfsg1-4ubuntu4","2:17.6+dfsg1-4ubuntu9","2:17.6+dfsg1-4ubuntu10","2:18.5+dfsg1-0ubuntu3","2:18.6+dfsg1-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"rawtherapee","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6-1","5.7-1","5.8-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"darktable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.0-0ubuntu1","3.8.0-2","3.8.0-3","3.8.0-3build1","3.8.0-3build2","3.8.1-1","3.8.1-2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"dcraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.28-2","9.28-3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"exactimage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.2-8","1.0.2-8build1","1.0.2-8build2","1.0.2-8build3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:19.1+dfsg2-2","2:19.3+dfsg1-1","2:19.3+dfsg1-1build2","2:19.3+dfsg1-1build3","2:19.3+dfsg1-1build4","2:19.3+dfsg1-1build5","2:19.4+dfsg1-2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.2-2ubuntu2.22.04.1"}]}],"versions":["0.20.2-1ubuntu3","0.20.2-2ubuntu1","0.20.2-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"rawtherapee","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8-3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"digikam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:7.5.0-3ubuntu0.1~esm1"}]}],"versions":["4:7.1.0-2","4:7.1.0-2ubuntu1","4:7.4.0-0ubuntu1","4:7.5.0-0ubuntu1","4:7.5.0-3fakesync1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"darktable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.2-1ubuntu1","4.4.2-1ubuntu2","4.4.2-1.1","4.4.2-1.1build1","4.6.1-2","4.6.1-2build3","4.6.1-2build4","4.6.1-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"dcraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.28-3","9.28-3.1ubuntu1","9.28-5ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"exactimage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.2-11build2","1.0.2-11build3","1.0.2-11build4","1.0.2-11build7","1.0.2-11build8","1.0.2-11build9"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:20.2+dfsg-4","2:20.2+dfsg-4build1","2:20.2+dfsg-4build2","2:20.2+dfsg-4ubuntu1","2:20.3+dfsg-1","2:20.4+dfsg-1","2:20.5+dfsg-1build2","2:20.5+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"rawtherapee","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9-1build1","5.9-2","5.10-1","5.10-1build3","5.10-1build4"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"darktable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.1-0ubuntu1","5.0.1-0ubuntu2","5.0.1-1","5.0.1-2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"dcraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.28-8"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"exactimage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.1-2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:21.2+dfsg-1build2","2:21.2+dfsg-4","2:21.2+dfsg-4build1","2:21.2+dfsg-4build2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"rawtherapee","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11-2build2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"darktable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.1-1","5.4.1-1build1","5.4.1-1build2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"dcraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.28-8build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"exactimage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.1-2build2","1.2.1-3build1","1.2.1-3build2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:21.3+dfsg-1ubuntu1","2:21.3+dfsg-1.2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"rawtherapee","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.12-2","5.12-2build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"darktable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.1-2","5.2.1-1","5.2.1-1build1","5.2.1-1build2","5.4.0-1","5.4.1-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"dcraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.28-8","9.28-8build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"exactimage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.1-2","1.2.1-2build1","1.2.1-2build2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:21.2+dfsg-4build2","2:21.2+dfsg-4build3","2:21.2+dfsg-5","2:21.3+dfsg-1","2:21.3+dfsg-1build1","2:21.3+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"rawtherapee","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11-2build2","5.12-1","5.12-2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.5-1ubuntu1.2"}]}],"versions":["0.19.5-1","0.19.5-1ubuntu1","0.19.5-1ubuntu1.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.2-2ubuntu2.22.04.1"}]}],"versions":["0.20.2-1ubuntu3","0.20.2-2ubuntu1","0.20.2-2ubuntu2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"digikam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.12.0-0ubuntu7+esm1"}]}],"versions":["4:4.12.0-0ubuntu5","4:4.12.0-0ubuntu6","4:4.12.0-0ubuntu7"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"digikam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.6.0-0ubuntu10+esm1"}]}],"versions":["4:5.6.0-0ubuntu2","4:5.6.0-0ubuntu3","4:5.6.0-0ubuntu4","4:5.6.0-0ubuntu7","4:5.6.0-0ubuntu8","4:5.6.0-0ubuntu9","4:5.6.0-0ubuntu10"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"digikam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:6.4.0+dfsg-3ubuntu0.1~esm1"}]}],"versions":["4:5.9.0-1ubuntu4","4:6.4.0+dfsg-3","4:6.4.0+dfsg-3build1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"digikam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:7.5.0-3ubuntu0.1~esm1"}]}],"versions":["4:7.1.0-2","4:7.1.0-2ubuntu1","4:7.4.0-0ubuntu1","4:7.5.0-0ubuntu1","4:7.5.0-3fakesync1"],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.1-2.1"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"libraw","product":"libraw"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://github.com/LibRaw/LibRaw/issues/557","tags":["x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","report","web","article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188240","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","report","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E5ZJ3UBTJBZHNPJQFOSGM5L7WAHHE2GY/","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AGZ6XF5WTPJ4GLXQ62JVRDZSVSJHXNQU/","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00025.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://www.debian.org/security/2023/dsa-5412","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://security.gentoo.org/glsa/202312-08","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1729","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AGZ6XF5WTPJ4GLXQ62JVRDZSVSJHXNQU"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E5ZJ3UBTJBZHNPJQFOSGM5L7WAHHE2GY"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGZ6XF5WTPJ4GLXQ62JVRDZSVSJHXNQU"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E5ZJ3UBTJBZHNPJQFOSGM5L7WAHHE2GY"},{"url":"https://github.com/advisories/GHSA-5gp6-9w92-5752"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-1729","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2137","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-1729","tags":["report"]},{"url":"https://bugzilla.redhat.com/2188240","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2137.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1753801728.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1729.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-1729","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1280","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-768","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2137.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-1729","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2024:2137","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232194-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1210720","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1729","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232195-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232196-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-1729","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6137-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7266-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-32142","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-0691","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-19858","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-22628","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-35530","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-35531","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-35532","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-35533","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-1729","description":"A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.","status":"published","published":"2023-05-15T00:00:00Z","modified":"2024-08-02T05:57:24.974Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:35:32.019713Z"}],"euvd":[{"id":"EUVD-2023-23952","description":"A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.","status":"published","published":"2023-05-15T00:00:00Z","modified":"2024-08-02T05:57:24Z","updated_at":"2026-11-03T03:50:15.01159Z"}],"ghsa":[{"id":"GHSA-5gp6-9w92-5752","title":"A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously...","description":"A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.","status":"published","published":"2023-05-16T00:30:16Z","modified":"2024-07-10T15:30:27Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-119","CWE-787"],"updated_at":"2026-11-02T14:57:40.937292Z"}],"nvd":[{"id":"CVE-2023-1729","description":"A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.","status":"published","published":"2023-05-15T22:15:10.35Z","modified":"2026-06-17T05:28:37.76Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-119","CWE-787"],"updated_at":"2026-11-02T14:08:02.399327Z"}],"osv":[{"id":"ALPINE-CVE-2023-1729","description":"A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.","status":"published","published":"2023-05-15T22:15:10.35Z","modified":"2026-11-03T06:32:42.308194646Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:17:02.90744Z"},{"id":"DEBIAN-CVE-2023-1729","description":"A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.","status":"published","published":"2023-05-15T22:15:10.35Z","modified":"2026-10-26T18:01:20.240196761Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:39.369204Z"},{"id":"JLSEC-2026-1108","description":"A flaw was found in LibRaw. A heap-buffer-overflow in `raw2image_ex()` caused by a maliciously crafted file may lead to an application crash.","status":"published","published":"2026-08-03T14:05:55.614Z","modified":"2026-08-03T14:15:03.406975549Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:18.159338Z"},{"id":"OESA-2023-1280","title":"LibRaw security update","description":"LibRaw is a library for reading RAW files from digital photo cameras (CRW/CR2, NEF, RAF, etc, virtually all RAW formats are supported).It pays special attention to correct retrieval of data required for subsequent RAW conversion.The library is intended for embedding in RAW converters, data analyzers, and other programs using RAW files as the initial data.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.(CVE-2023-1729)","status":"published","published":"2023-05-19T11:05:45Z","modified":"2026-08-18T01:17:41.292052925Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2024:2137","title":"Red Hat Security Advisory: LibRaw security update","status":"published","published":"2024-09-16T13:57:33Z","modified":"2026-06-26T12:22:38.88634636Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RLSA-2024:2137","title":"Low: LibRaw security update","description":"LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).\n\nSecurity Fix(es):\n\n* LibRaw: a heap-buffer-overflow in raw2image_ex() (CVE-2023-1729)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.","status":"published","published":"2025-05-07T19:13:05.465265Z","modified":"2025-10-07T17:38:07.562857Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2023-1729","description":"A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.","status":"published","published":"2023-05-15T22:15:00Z","modified":"2026-10-17T12:56:00.506429179Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:18.756095Z"},{"id":"ALSA-2024:2137","title":"Low: LibRaw security update","description":"LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).\n\nSecurity Fix(es):\n\n* LibRaw: a heap-buffer-overflow in raw2image_ex() (CVE-2023-1729)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-10-29T11:31:42.548976519Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CLSA-2025-1753801728","title":"LibRaw: Fix of CVE-2023-1729","description":"- CVE-2023-1729: fix heap-buffer-overflow in raw2image_ex() to prevent\n  application crash","status":"published","published":"2025-07-29T15:08:52Z","modified":"2026-06-01T00:30:46.04406612Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CVE-2023-1729","description":"A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.","status":"published","published":"2023-05-15T00:00:00Z","modified":"2026-10-28T02:30:32.992400316Z","cwes":["CWE-119"],"updated_at":"2026-11-02T15:44:30.334753Z"},{"id":"DLA-3433-1","title":"libraw - security update","status":"published","published":"2023-05-27T00:00:00Z","modified":"2026-03-09T01:18:53.444272Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5412-1","title":"libraw - security update","status":"published","published":"2023-05-27T00:00:00Z","modified":"2026-03-09T02:08:39.395279Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"openSUSE-SU-2024:12901-1","title":"libraw-devel-0.21.1-2.1 on GA media","description":"These are all security issues fixed in the libraw-devel-0.21.1-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:34:20.662445Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"SUSE-SU-2023:2194-1","title":"Security update for libraw","description":"This update for libraw fixes the following issues:\n\n- CVE-2023-1729: Fixed a heap buffer overflow when converting an\n  image (bsc#1210720).\n","status":"published","published":"2023-05-15T08:59:22Z","modified":"2026-02-04T03:30:32.956484Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:2195-1","title":"Security update for libraw","description":"This update for libraw fixes the following issues:\n\n- CVE-2023-1729: Fixed a heap buffer overflow when converting an\n  image (bsc#1210720).\n","status":"published","published":"2023-05-15T08:59:35Z","modified":"2026-02-04T02:40:17.112092Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:2196-1","title":"Security update for libraw","description":"This update for libraw fixes the following issues:\n\n- CVE-2023-1729: Fixed a heap buffer overflow when converting an\n  image (bsc#1210720).\n","status":"published","published":"2023-05-15T08:59:48Z","modified":"2026-02-04T03:59:41.293351Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"USN-6137-1","title":"libraw vulnerabilities","description":"It was discovered that LibRaw incorrectly handled photo files. If a user or\nautomated system were tricked into processing a specially crafted photo\nfile, a remote attacker could cause applications linked against LibRaw to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode.\n","status":"published","published":"2023-06-05T13:59:03Z","modified":"2026-04-27T16:43:16.333839Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-7266-1","title":"digikam vulnerabilities","description":"Zinuo Han and Ao Wang discovered that the Android DNG SDK, vendored in\ndigiKam, did not correctly parse certain files. An attacker could possibly\nuse this issue to execute arbitrary code. This issue only affected\nUbuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2017-0691)\n\nIt was discovered that Platinum Upnp SDK, vendored in digiKam, was\nvulnerable to a path traversal attack. An attacker could possibly use this\nissue to leak sensitive information. This issue only affected \nUbuntu 20.04 LTS. (CVE-2020-19858)\n\nIt was discovered that LibRaw, vendored in digiKam, did not correctly\nhandle certain memory operations. If a user or automated system were\ntricked into opening a specially crafted file, an attacker could possibly\nuse this issue to leak sensitive information. This issue only affected\nUbuntu 20.04 LTS. (CVE-2020-22628)\n\nIt was discovered that LibRaw, vendored in digiKam, did not correctly\nhandle certain memory operations. If a user or automated system were\ntricked into opening a specially crafted file, an attacker could possibly\nuse this issue to cause a denial of service or execute arbitrary code. This\nissue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-35530,\nCVE-2020-35531, CVE-2020-35532, CVE-2020-35533)\n\nIt was discovered that LibRaw, vendored in digiKam, did not correctly\nhandle certain memory operations. If a user or automated system were\ntricked into opening a specially crafted file, an attacker could possibly\nuse this issue to cause a denial of service or execute arbitrary code.\nThis issue only affected Ubuntu 20.04 LTS. (CVE-2021-32142)\n\nIt was discovered that LibRaw, vendored in digiKam, did not correctly\nhandle certain memory operations. If a user or automated system were\ntricked into opening a specially crafted file, an attacker could possibly\nuse this issue to cause a denial of service or execute arbitrary code.\nThis issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and\nUbuntu 22.04 LTS. (CVE-2023-1729)\n","status":"published","published":"2025-02-13T03:28:13Z","modified":"2026-06-25T13:32:30.14328564Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}