← Database

CVE-2021-3624

HIGH CVSS: 7.8 Published: 2022-04-18 Modified: 2026-06-17

Description

There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code may be executed in the victim's system.

Affected Platforms

Dcraw Project DcrawDebian Debian Linux

Weakness Type

CWE-20, CWE-190

References