CVE-2017-14608

Name of the Vulnerable Software and Affected Versions: LibRaw versions prior to 0.18.5

Description: The issue is related to an out of bounds read flaw in the kodak 65000 load raw function, affecting components dcraw/dcraw.c and internal/dcraw common.cpp. This could potentially allow an attacker to disclose sensitive memory or cause an application crash. The vulnerability can be exploited by a remote attacker to gain access to confidential data and cause a denial of service.

Recommendations: For LibRaw versions prior to 0.18.5, update to version 0.18.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the kodak 65000 load raw function in dcraw/dcraw.c and internal/dcraw common.cpp until a patch is available.