https://bugzilla.redhat.com/show_bug.cgi?id=2122362 Bug ID: 2122362 Summary: CVE-2020-35535 LibRaw: Out-of-bounds read in LibRaw::parseSonySRF() function Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: psampaio(a)redhat.com CC: dchen(a)redhat.com, debarshir(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, gwync(a)protonmail.com, hobbes1069(a)gmail.com, jridky(a)redhat.com, manisandro(a)gmail.com, mattdm(a)redhat.com, mattia.verga(a)proton.me, michel(a)michel-slm.name, ngompa13(a)gmail.com, nphilipp(a)redhat.com, sebastian(a)sdziallas.com, sergio(a)serjux.com, siddharth.kde(a)gmail.com, sipoyare(a)redhat.com, thibault(a)north.li Target Milestone: --- Classification: Other In LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF()" function (libraw\src\metadata\sony.cpp) when processing srf files. Upstream issue: https://github.com/LibRaw/LibRaw/issues/283 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2122362