Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2018-19565

Date: October 3, 2022

A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information.

Severity Score

Related Resources (6)

https://seclists.org/oss-sec/2018/q4/165
https://security-tracker.debian.org/tracker/CVE-2018-19565
https://nvd.nist.gov/vuln/detail/CVE-2018-19565
https://seclists.org/oss-sec/2018/q4/171
https://access.redhat.com/security/cve/CVE-2018-19565
https://www.mend.io/vulnerability-database/CVE-2018-19565

Severity Score

Weakness Type (CWE)

Out-of-bounds Read

CWE-125

CVSS v3

Base Score:
Attack Vector (AV):
Attack Complexity (AC):
Privileges Required (PR):
User Interaction (UI):
Scope (S):
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): PARTIAL

CVSS v2

Base Score:
Access Vector (AV):
Access Complexity (AC):
Authentication (AU):
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH
Additional information:

Do you need more information?

Contact Us