CVE-2025-43964

概要

参考情報

• LibRaw/LibRaw commit a50dc3f · Patch
• LibRaw/LibRaw · Patch
• libraw.org/news/libraw-0-21-4-release · Release Notes
• lists.debian.org/debian-lts-announce/2025/04/msg00038.html

libraw のその他の脆弱性

• CVE-2026-24660高 8.1A heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw Commit d20315b. A specially crafted malici…
• CVE-2026-24450緊急 9.8An integer overflow vulnerability exists in the uncompressed_fp_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted mal…
• CVE-2026-21413緊急 9.8A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b. A…
• CVE-2026-20911緊急 9.8A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw Commit 0b56545 and Commit d20315b. A spe…
• CVE-2026-20889緊急 9.8A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d20315b. A specially crafted malici…