Known vulnerabilities in libraw (Alpine package)

Known vulnerabilities in libraw (Alpine package)

Vendor: Alpine Linux Development Team

Software: libraw (Alpine package)

Software CPE: cpe:2.3:o:alpine:libraw_alpine_package:*:*:*:*:*:alpine_linux:*:*

Website: https://alpinelinux.org/

Total vulnerabilities: 17

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (17)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU47048 - NULL Pointer Dereference CVE-2020-24890	CWE-476	High	No	No	-	16.09.2020	-
#VU31920 - Memory corruption CVE-2020-15503	CWE-119	Medium	No	No	0.19.5-r1	27.07.2020	SB2020070228 SB2020072741 SB2020080204 and 12 more
#VU30444 - Improper Control of Generation of Code ('Code Injection') CVE-2015-8366	CWE-94	High	No	No	0.17.1-r0	14.01.2020	SB20200114103 SB2017061612 SB2017061613 and 5 more
#VU30445 - Improper Initialization CVE-2015-8367	CWE-665	High	No	No	0.17.1-r0	14.01.2020	SB20200114103 SB2017061614 SB2017061615 and 6 more
#VU17353 - Improper input validation CVE-2018-5819	CWE-20	Low	No	No	-	01.02.2019	-
#VU17352 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2018-5818	CWE-835	Low	No	No	-	01.02.2019	-
#VU17351 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2018-5817	CWE-835	Low	No	No	-	01.02.2019	-
#VU16691 - Heap-based Buffer Overflow CVE-2018-20365	CWE-122	Low	No	No	0.19.2-r0	25.12.2018	SB2018122504 SB2019012912 SB2019052213 and 3 more
#VU16690 - NULL Pointer Dereference CVE-2018-20364	CWE-476	Low	No	No	0.19.2-r0	25.12.2018	SB2018122504 SB2019012912 SB2019052213 and 3 more
#VU16689 - NULL Pointer Dereference CVE-2018-20363	CWE-476	Low	No	No	0.19.2-r0	25.12.2018	SB2018122504 SB2019012912 SB2019052213 and 3 more
#VU12526 - Stack-based buffer overflow CVE-2018-10528	CWE-121	Low	No	No	0.18.13-r0	10.05.2018	SB2018051007 SB2019013134 SB2018050314 and 7 more
#VU12525 - Out-of-bounds read CVE-2018-10529	CWE-125	Low	No	No	0.18.13-r0	10.05.2018	SB2018051007 SB2019013135 SB2018050314 and 7 more
#VU11800 - Out-of-bounds read CVE-2017-16910	CWE-125	Low	No	No	0.18.6-r0	12.04.2018	SB2017121221 SB2017122805 SB2017120656 and 1 more
#VU32065 - Memory corruption CVE-2017-14265	CWE-119	High	No	No	0.18.5-r0	11.09.2017	SB2017091107 SB2017102321 SB2017092211 and 6 more
#VU33237 - Improper input validation CVE-2017-13735	CWE-20	Medium	No	No	0.18.5-r0	29.08.2017	SB2017082910 SB2017102330 SB2017092211 and 16 more
#VU32071 - Memory corruption CVE-2017-6886	CWE-119	High	No	No	0.17.2-r1	16.05.2017	SB2017051623 SB2017090523 SB2017070108
#VU32072 - Memory corruption CVE-2017-6887	CWE-119	Low	No	No	0.17.2-r1	16.05.2017	SB2017051624 SB2017090524 SB2017070108