CVE-2021-3624 | BDVDB-2026-174346 Detail

dcraw

Description#

There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code may be executed in the victim's system.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-20 Improper Input Validation

References#

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=984761

Exploit#

No public exploit known

History#

Version 12022-04-18Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.