CVE-2014-4978: The rs_filter_graph function in librawstudio/rs-filter.c in rawstudio might allow local users to truncate a...

Security readout for executives and security teams

CVE-2014-4978 is a local file-handling flaw in Rawstudio. When generating a filter graph, Rawstudio used predictable temporary paths in /tmp, which could let a local user cause files accessible to the Rawstudio user to be truncated. This is not a remote compromise issue, and the supplied sources do not show active exploitation. Exposure is most likely on legacy Linux systems, imaging workstations, or build images where Rawstudio is installed. The source bundle does not provide affected versions, so inventory must be package-based and distribution-specific. Handle during normal vulnerability hygiene unless Rawstudio exists on shared multi-user systems or privileged imaging workstations. Business urgency is limited by local-only exploitation, but arbitrary file truncation can still disrupt operations or damage user data. Mitigation focus: Check vendor and distribution advisories for fixed Rawstudio packages.; Update Rawstudio from trusted distribution repositories where available.; If Rawstudio is unnecessary, remove it from managed systems..

Prepared

Jun 7, 2026, 21:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.