What’s Vulnerable › Vulnerabilities

CVE-2017-14608

• Severity: critical (CVSS 9.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-09-20 · updated 2026-06-17
• Weakness: CWE-125

Description

In LibRaw through 0.18.4, an out of bounds read flaw related to kodak_65000_load_raw has been reported in dcraw/dcraw.c and internal/dcraw_common.cpp. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash.

Affected products

• LibRaw: through 0.18.4

References

• https://github.com/LibRaw/LibRaw/commit/d13e8f6d1e987b7491182040a188c16a395f1d21
• https://github.com/LibRaw/LibRaw/issues/101
• https://github.com/LibRaw/LibRaw/commit/d13e8f6d1e987b7491182040a188c16a395f1d21
• https://github.com/LibRaw/LibRaw/issues/101

Get alerted when CVE-2017-14608 or the next vulnerability affects your stack