CVE:CVE-2020-35535
CNNVD:CNNVD-202209-033
Libraw是Libraw公司的一个用来处理RAW(CRW/CR2,NEF,RAF,DNG,andothers)格式图片的C++库，支持各种操作系统。
Libraw 存在安全漏洞，该漏洞源于处理 srf 文件时，parseSonySRF()函数中存在越界读取。
solution:Upgrade libraw libraw to a higher version than 0.20.0,0.20.0:rc2,0.20.1,0.20.2,0.21.0:beta1,and avoid the version 0.20.0,0.20.0:rc2,0.20.1,0.20.2,0.21.0:beta1