CVE-2018-5804

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.8

Description A type confusion error within the identify() function in LibRaw can be exploited to trigger a division by zero, potentially leading to a denial of service. The issue is related to a lack of division by zero checking in the internal/dcraw common.cpp component of the image processing library.

Recommendations For versions prior to 0.18.8, update to version 0.18.8 or later to resolve the issue. As a temporary workaround, consider disabling the identify() function until a patch is available.