CVE-2025-43962
In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp has out-of-bounds reads for tag 0x412 processing, related to large w0 or w1 va...
Original description
The description as published by the source.
In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp has out-of-bounds reads for tag 0x412 processing, related to large w0 or w1 values or the frac and mult calculations.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2025-43962 libraw Fixed in: 0.20.2-1+deb11u2
- Ubuntu UBUNTU-CVE-2025-43962 libraw Fixed in: 0.17.1-1ubuntu0.5+esm1
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com
- web lists.debian.org
- web libraw.org