VDB
GCVE-VVD-MAGEIA-2025-316
GCVE-VVD-MAGEIA-2025-316
Advisory Published
In LibRaw before 0.21.4, metadata/tiff.cpp has an out-of-bounds read in
the Fujifilm 0xf00c tag parser. (CVE-2025-43961)
In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp
has out-of-bounds reads for tag 0x412 processing, related to large w0 or
w1 values or the frac and mult calculations. (CVE-2025-43962)
In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp
allows out-of-buffer access because split_col and split_row values are
not checked in 0x041f tag processing. (CVE-2025-43963)
In LibRaw before 0.21.4, tag 0x412 processing in phase_one_correct in
decoders/load_mfbacks.cpp does not enforce minimum w0 and w1 values.
(CVE-2025-43964)
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | libraw | 0 (affected), 0.20.2-5.1.mga9 (unaffected) | — |
| Mageia | digikam | 0 (affected), 8.4.0-1.1.mga9 (unaffected) | — |
| Mageia | darktable | 0 (affected), 4.6.1-1.2.mga9 (unaffected) | — |
References
Browse GCVE Records
100 records in the GCVE database · Updated April 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.