CVE-2018-20337

CVE-2018-20337 describes a stack-based buffer overflow in the parse_makernote function of LibRaw 0.19.1, specifically within the dcraw_common.cpp file. This vulnerability, triggered by crafted input, can lead to a denial of service or potentially other unspecified impacts. With a CVSS score of 8.8 (High), it presents a significant risk due to its network-based attack vector and low attack complexity, allowing for high impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.