CVE-2018-5815 on Ubuntu 16.04 LTS (xenial) - medium.
Description:
An integer overflow error within the "parse_qt()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.12 can be exploited to trigger an infinite loop via a specially crafted Apple QuickTime file.