← Database

CVE-2025-43962

LOW CVSS: 2.9 Published: 2025-04-21 Modified: 2026-06-17

Description

In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp has out-of-bounds reads for tag 0x412 processing, related to large w0 or w1 values or the frac and mult calculations.

Affected Platforms

Libraw Libraw

Weakness Type

CWE-125, CWE-125

References