CVE-2017-6887

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.2

Description A boundary error within the parse tiff ifd() function can be exploited to cause memory corruption via a specially crafted file, such as a KDC file with the model set to "DSLR-A100" and containing multiple sequences of 0x100 and 0x14A TAGs.

Recommendations For versions prior to 0.18.2, update to version 0.18.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of the parse tiff ifd() function until a patch is available.