CVE-2020-35532: Debian Linux

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

In LibRaw, an out-of-bounds read vulnerability exists within the "simple_decode_row()" function (libraw\src\x3f\x3f_utils_patched.cpp) which can be triggered via an image with a large row_stride field.

Affected products

• Debian Debian Linux: version 10.0 only
• Libraw Libraw: version 0.20.0 only; version 0.20.1 only; version 0.20.2 only; version 0.21.0 only

Published 2022-09-01. Last modified 2026-06-17.