Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed full-color (1) Foveon or (2) sRAW image file.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libraw | Libraw | * | 0.15.1 (including) |
| Libraw | Libraw | 0.15.0 (including) | 0.15.0 (including) |