CVE-2020-24889

Description

A buffer overflow vulnerability in LibRaw version < 20.0 LibRaw::GetNormalizedModel in src/metadata/normalize_model.cpp may lead to context-dependent arbitrary code execution.

References

https://github.com/Live-Hack-CVE/CVE-2020-24889

https://security.gentoo.org/glsa/202010-05

https://github.com/LibRaw/LibRaw/issues/334

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-17597

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS