Out-of-Bounds Access Vulnerability in LibRaw Software by LibRaw Team

CVE-2025-43963

What is CVE-2025-43963?

A vulnerability exists in LibRaw versions prior to 0.21.4, specifically in the phase_one_correct function located in decoders/load_mfbacks.cpp. This issue arises due to inadequate validation of split_col and split_row variables during the processing of 0x041f tags. As a result, attackers may exploit this weakness to execute unauthorized memory access, leading to potential data corruption or other malicious outcomes.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References