CVE:CVE-2023-1729
CNNVD:CNNVD-202305-1445
Libraw是Libraw公司的一个用来处理RAW(CRW/CR2,NEF,RAF,DNG,andothers)格式图片的C++库，支持各种操作系统。
LibRaw 存在安全漏洞，该漏洞源于使用函数raw2image_ex(int) 时存在堆缓冲区溢出。
solution:Upgrade libraw libraw to a higher version than 2023-01-14,and avoid the version (,2023-01-14); Upgrade fedoraproject fedora to a higher version than 37,38,and avoid the version 37,38; Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0