CVE-2017-6890

Name of the Vulnerable Software and Affected Versions LibRaw-demosaic-pack-GPL2 versions prior to 0.18.2

Description A boundary error in the foveon load camf() function, located in dcraw foveon.c, can cause a stack-based buffer overflow when initializing a huffman table.

Recommendations For versions prior to 0.18.2, update to version 0.18.2 or later to resolve the issue. As a temporary workaround, consider disabling the foveon load camf() function until a patch is available.