{"id":"CVE-2017-6887","details":"A boundary error within the \"parse_tiff_ifd()\" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to cause a memory corruption via e.g. a specially crafted KDC file with model set to \"DSLR-A100\" and containing multiple sequences of 0x100 and 0x14A TAGs.","modified":"2026-05-17T11:55:18.812922427Z","published":"2017-05-16T16:29:00.253Z","related":["SUSE-SU-2017:2300-1","openSUSE-SU-2024:10980-1"],"database_specific":{},"references":[{"type":"ADVISORY","url":"http://www.debian.org/security/2017/dsa-3950"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/98592"},{"type":"REPORT","url":"https://secuniaresearch.flexerasoftware.com/advisories/75737/"},{"type":"REPORT","url":"https://secuniaresearch.flexerasoftware.com/secunia_research/2017-6/"},{"type":"FIX","url":"https://github.com/LibRaw/LibRaw/commit/d7c3d2cb460be10a3ea7b32e9443a83c243b2251"}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}