CVE-2017-14348

LibRaw before 0.18.4 has a heap-based Buffer Overflow in the processCanonCameraInfo function via a crafted file.

• CWE-119

• http://www.securityfocus.com/bid/100866Third Party Advisory, VDB Entry
• https://github.com/LibRaw/LibRaw/issues/100Third Party Advisory
• http://www.securityfocus.com/bid/100866Third Party Advisory, VDB Entry
• https://github.com/LibRaw/LibRaw/issues/100Third Party Advisory

Published

Sep 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14342ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in…
• CVE-2017-14343ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadX…
• CVE-2017-14344This vulnerability allows local attackers to escalate privil…
• CVE-2017-14345SQL Injection exists in tianchoy/blog through 2017-09-12 via…
• CVE-2017-14346upload.php in tianchoy/blog through 2017-09-12 allows unrest…
• CVE-2017-14347NexusPHP 1.5.beta5.20120707 has XSS in the returnto paramete…
• CVE-2017-14349An authentication vulnerability in HPE SiteScope product ver…
• CVE-2017-14350A potential security vulnerability has been identified in HP…
• CVE-2017-14351A potential security vulnerability has been identified in HP…
• CVE-2017-14352A potential security vulnerability has been identified in HP…
• CVE-2017-14353A remote code execution vulnerability in HP UCMDB Foundation…
• CVE-2017-14354A remote cross-site scripting vulnerability in HP UCMDB Foun…