Description
libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE Package Hub 15 SP1 | libmirage | 3.2.2-bp151.4.6.1 | openSUSE-SU-2019:2129-1 |
| SUSE Package Hub 15 | libmirage | 3.2.2-bp151.4.6.1 | openSUSE-SU-2019:2129-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.1 | libmirage | 3.2.2-lp151.3.6.1 | openSUSE-SU-2019:2096-1 |
| openSUSE Leap 15.0 | libmirage | 3.2.2-lp150.2.6.1 | openSUSE-SU-2019:2095-1 |
Advisories 3
- openSUSE-SU-2019:2096-1 Security update for libmirage SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:2095-1 Security update for libmirage SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:2129-1 Security update for libmirage SUSE / openSUSE Security Updates · Feb 4, 2026
References
- https://gist.github.com/andreafioraldi/343d9ba64060b548c02362a5e61ec932
- https://sourceforge.net/p/cdemu/bugs/118/
- openSUSE-SU-2019:2096 vendor-advisory
- openSUSE-SU-2019:2095 vendor-advisory
- openSUSE-SU-2019:2129 vendor-advisory