CVEs-PoC/2020/CVE-2020-24890.md

CVE-2020-24890

Description

** DISPUTED ** libraw 20.0 has a null pointer dereference vulnerability in parse_tiff_ifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code execution. Note: this vulnerability occurs only if you compile the software in a certain way.

POC

Reference

• https://github.com/LibRaw/LibRaw/issues/335

Github

No PoCs found on GitHub currently.