CVE-2018-5815

Publication date

2018-12-07 22:00:00

Family

flexera

State

PUBLISHED

Description

An integer overflow error within the "parse_qt()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.12 can be exploited to trigger an infinite loop via a specially crafted Apple QuickTime file.