LibRaw-debuginfo-0:0.19.5-1.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical3high2medium0low

updated 2026-10-28

vulnerabilities (5)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-20337US	high8.8	2.15% (82nd)	—	no fix	2018-12-21	—
CVE-2019-12449US	medium5.7	1.81% (79th)	—	no fix	2019-05-29	—
CVE-2019-12447US	high7.3	1.81% (78th)	—	no fix	2019-05-29	—
CVE-2019-12448US	high8.1	1.76% (78th)	—	no fix	2019-05-29	—
CVE-2019-3825US	medium6.4	0.51% (43rd)	—	no fix	2019-02-06	—

The flaw types (CWEs) most of these CVEs share.

CWE-275CWE-2752 CVEs
CWE-282Improper Ownership Management2 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1 CVEs
CWE-364Signal Handler Race Condition1 CVEs
CWE-755Improper Handling of Exceptional Conditions1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.