Most recent entries from all

bdu:2025-10595

2026-10-02T12:35:35.785122+00:00

bdu:2025-10595

EUVD-2026-257940

2026-10-02T12:35:35.785161+00:00

EUVD-2026-257940

fkie_cve-2025-43964

2026-10-02T12:35:35.785176+00:00

In LibRaw before 0.21.4, tag 0x412 processing in phase_one_correct in decoders/load_mfbacks.cpp does not enforce minimum w0 and w1 values.

GHSA-3cxc-phxh-65vq

2026-10-02T12:35:35.785204+00:00

In LibRaw before 0.21.4, tag 0x412 processing in phase_one_correct in decoders/load_mfbacks.cpp does not enforce minimum w0 and w1 values.

OESA-2025-1478 — LibRaw security update

2026-10-02T12:35:35.785219+00:00

Affected: openEuler:24.03-LTS: LibRaw, openEuler:24.03-LTS-SP1: LibRaw, openEuler:20.03-LTS-SP4: LibRaw, openEuler:22.03-LTS-SP3: LibRaw, openEuler:22.03-LTS-SP4: LibRaw

LibRaw is a library for reading RAW files from digital photo cameras (CRW/CR2, NEF, RAF, etc, virtually all RAW formats are supported).It pays special attention to correct retrieval of data required for subsequent RAW conversion.The library is intended for embedding in RAW converters, data analyzers, and other programs using RAW files as the initial data. Security Fix(es):

In LibRaw before 0.21.4, metadata/tiff.cpp has an out-of-bounds read in the Fujifilm 0xf00c tag parser.(CVE-2025-43961)

In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp has out-of-bounds reads for tag 0x412 processing, related to large w0 or w1 values or the frac and mult calculations.(CVE-2025-43962)

In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp allows out-of-buffer access because split_col and split_row values are not checked in 0x041f tag processing.(CVE-2025-43963)

In LibRaw before 0.21.4, tag 0x412 processing in phase_one_correct in decoders/load_mfbacks.cpp does not enforce minimum w0 and w1 values.(CVE-2025-43964)

openSUSE-SU-2025:15025-1 — libraw-devel-0.21.4-1.1 on GA media

2026-10-02T12:35:35.785256+00:00

libraw-devel-0.21.4-1.1 on GA media

SUSE-SU-2025:1380-1 — Security update for libraw

2026-10-02T12:35:35.785274+00:00

Security update for libraw

UBUNTU-CVE-2025-43964

2026-10-02T12:35:35.785289+00:00

Affected: Ubuntu:Pro:16.04:LTS: libraw, Ubuntu:16.04:LTS: darktable, Ubuntu:16.04:LTS: dcraw, Ubuntu:Pro:16.04:LTS: digikam, Ubuntu:16.04:LTS: exactimage, Ubuntu:16.04:LTS: kodi, Ubuntu:16.04:LTS: rawtherapee, Ubuntu:16.04:LTS: ufraw, Ubuntu:Pro:18.04:LTS: libraw, Ubuntu:18.04:LTS: darktable and 39 more

In LibRaw before 0.21.4, tag 0x412 processing in phase_one_correct in decoders/load_mfbacks.cpp does not enforce minimum w0 and w1 values.