vulnerability

Red Hat: CVE-2025-43964: LibRaw: Improper Validation of Specified Quantity in Input in LibRaw

Try Surface Command
Back to search
Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
Apr 21, 2025
Added
Jul 9, 2025
Modified
Jul 10, 2025

Description

In LibRaw before 0.21.4, tag 0x412 processing in phase_one_correct in decoders/load_mfbacks.cpp does not enforce minimum w0 and w1 values.

Solution

no-fix-redhat-rpm-package

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today