Name of the Vulnerable Software and Affected Versions: rawspeed (affected versions not specified)

Description: The issue is related to a crash type known as Use-after-poison WRITE 2. It occurs in the rawspeed::OrfDecoder::decodeCompressed function, which is called by rawspeed::OrfDecoder::decodeRawInternal and rawspeed::RawDecoder::decodeRaw.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.