5 matches found
EUVD-2025-11959
Malicious code in bioql PyPI...
The vulnerability of the phase_onecorrect() function in the decoders/load_mfbacks.cpp component of the LibRaw image processing library allows a attacker to execute arbitrary code.
The vulnerability of the phaseonecorrect function in the decoders/loadmfbacks.cpp component of the LibRaw image processing library is related to reading data beyond the buffer boundaries in memory during the processing of the 0x412 tag. Exploiting this vulnerability could allow an attacker to...
SUSE CVE-2025-43964
In LibRaw before 0.21.4, tag 0x412 processing in phaseonecorrect in decoders/loadmfbacks.cpp does not enforce minimum w0 and w1 values...
AZL-61780 CVE-2025-43962 affecting package LibRaw 0.21.3-1
In LibRaw before 0.21.4, phaseonecorrect in decoders/loadmfbacks.cpp has out-of-bounds reads for tag 0x412 processing, related to large w0 or w1 values or the frac and mult calculations...