CVE-2025-43964: Critical severity Libraw Libraw vulnerability
In LibRaw before 0.21.4, tag 0x412 processing in phaseonecorrect in decoders/loadmfbacks.cpp does not enforce minimum w0 and w1 values.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/librawto a version that resolves this vulnerability.Fixed in 0.20.2-1+deb11u2Fixed in 0.21.4-2 - Upgrade
Upgrade
ubuntu/librawto a version that resolves this vulnerability.Fixed in 0.17.1-1ubuntu0.5+esm1 - Upgrade
Upgrade
ubuntu/librawto a version that resolves this vulnerability.Fixed in 0.18.8-1ubuntu0.4+esm1 - Upgrade
Upgrade
ubuntu/librawto a version that resolves this vulnerability.Fixed in 0.19.5-1ubuntu1.4 - Upgrade
Upgrade
ubuntu/librawto a version that resolves this vulnerability.Fixed in 0.20.2-2ubuntu2.22.04.2 - Upgrade
Upgrade
ubuntu/librawto a version that resolves this vulnerability.Fixed in 0.21.2-2.1ubuntu0.24.04.1 - Upgrade
Upgrade
LibRawto a version that resolves this vulnerability.Fixed in 0.21.4
Event History
Frequently Asked Questions
What is the severity of CVE-2025-43964?
CVE-2025-43964 is classified as a moderate severity vulnerability due to the lack of input validation affecting image processing.
How do I fix CVE-2025-43964?
To fix CVE-2025-43964, update LibRaw to version 0.21.4 or later, which addresses the issue with tag 0x412 processing.
What versions of LibRaw are affected by CVE-2025-43964?
CVE-2025-43964 affects LibRaw versions prior to 0.21.4.
What are the potential impacts of CVE-2025-43964?
The vulnerability may lead to incorrect image processing, resulting in potential data corruption or application crashes.
Where can I find more information about CVE-2025-43964?
For more details on CVE-2025-43964, refer to the official release notes from LibRaw regarding version 0.21.4.