CVE-2018-19566

Name of the Vulnerable Software and Affected Versions dcraw versions through 9.28

Description A heap buffer over-read issue exists in the parse tiff ifd function of dcraw, which could allow attackers to crash an application that uses the dcraw code or leak private information by supplying malicious files.

Recommendations For versions through 9.28, update to a version that contains a fix for this issue to prevent potential crashes or information leaks.