CVE-2025-43964

In LibRaw before 0.21.4, tag 0x412 processing in phaseonecorrect in decoders/loadmfbacks.cpp does not enforce minimum w0 and w1 values...

CVE-2025-43961

Summary (CVE-2025-43961 family) LibRaw before 0.21.4 has multiple memory-safety issues. The Mageia advisory confirms CVE-2025-43961 affects the Fujifilm 0xf00c tag parser in metadata/tiff.cpp, causing an out-of-bounds read. Additional CVEs in the same LibRaw series are described in the advisory: ...

CVE-2025-43963

In LibRaw before 0.21.4, phaseonecorrect in decoders/loadmfbacks.cpp allows out-of-buffer access because splitcol and splitrow values are not checked in 0x041f tag processing...

CVE-2025-43963

CVE-2025-43963 affects LibRaw before 0.21.4. The issue is in phase_one_correct (decoders/load_mfbacks.cpp) where 0x041f tag processing allows out-of-buffer access because split_col and split_row are not checked, leading to potential memory safety impact. Connected advisories confirm the same CVE ...

CVE-2025-43964

In LibRaw before 0.21.4, tag 0x412 processing in phaseonecorrect in decoders/loadmfbacks.cpp does not enforce minimum w0 and w1 values...

PT-2025-17418

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.21.4 Description The issue is related to an out-of-bounds read in the Fujifilm 0xf00c tag parser within the metadata/tiff.cpp file. Recommendations For versions prior to 0.21.4, update to version 0.21.4 or later to...

PT-2025-17420

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.21.4 Description The issue arises from the phase one correct function in decoders/load mfbacks.cpp, which allows out-of-buffer access. This occurs because the split col and split row values are not checked during the...

PT-2025-17419

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.21.4 Description The issue is related to out-of-bounds reads in the phase one correct function within decoders/load mfbacks.cpp for tag 0x412 processing. This is caused by large w0 or w1 values or the frac and mult...

PT-2025-17421

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.21.4 Description The issue arises from the processing of tag 0x412 in the phase one correct function within decoders/load mfbacks.cpp, where minimum w0 and w1 values are not enforced. Recommendations For versions pri...

Linux Distros Unpatched Vulnerability : CVE-2023-1729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in LibRaw. A heap-buffer-overflow in raw2imageex caused by a maliciously crafted file may lead to an application crash. CVE-2023-1729 Note that...

Linux Distros Unpatched Vulnerability : CVE-2021-32142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::getschar, int in...

Linux Distros Unpatched Vulnerability : CVE-2018-5801

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An error within the LibRaw::unpack function src/librawcxx.cpp in LibRaw versions prior to 0.18.7 can be exploited to trigger a NULL pointer dereference...

Linux Distros Unpatched Vulnerability : CVE-2017-14608

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LibRaw through 0.18.4, an out of bounds read flaw related to kodak65000loadraw has been reported in dcraw/dcraw.c and internal/dcrawcommon.cpp. An attacker...

Linux Distros Unpatched Vulnerability : CVE-2017-16910

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An error within the LibRaw::xtransinterpolate function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read...

Linux Distros Unpatched Vulnerability : CVE-2018-10528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in LibRaw 0.18.9. There is a stack-based buffer overflow in the utf2char function in librawcxx.cpp. CVE-2018-10528 Note that Nessus reli...

Linux Distros Unpatched Vulnerability : CVE-2017-6887

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A boundary error within the parsetiffifd function internal/dcrawcommon.cpp in LibRaw versions before 0.18.2 can be exploited to cause a memory corruption via e....

Linux Distros Unpatched Vulnerability : CVE-2018-5805

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A boundary error within the quicktake100loadraw function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.8 can be exploited to cause a stack-based...

Linux Distros Unpatched Vulnerability : CVE-2018-5800

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An off-by-one error within the LibRaw::kodakycbcrloadraw function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.7 can be exploited to cause a...

Linux Distros Unpatched Vulnerability : CVE-2020-15503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpackthumb.cpp, postprocessing/memimage.cpp, and utils/thumbutils.cpp. For...

Linux Distros Unpatched Vulnerability : CVE-2020-22628

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in LibRaw::stretch function in libraw\src\postprocessing\aspectratio.cpp. CVE-2020-22628 Note that Nessus relies on the presence o...