SUSE-SU-2025:1380-1

Advisory lineage Upstream: 4 Downstream: 0
Published: 28 Apr 2025, 07:36
Last modified:04 Feb 2026, 04:41

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

28 Apr 2025, 07:36
Published
Vulnerability first disclosed
04 Feb 2026, 04:41
Last Modified
Vulnerability information updated

Description

Security update for libraw This update for libraw fixes the following issues: - CVE-2025-43962: Fixed out-of-bounds read when tag 0x412 processing in phase_one_correct function (bsc#1241585) - CVE-2025-43964: Fixed tag 0x412 processing in phase_one_correct does not enforce minimum w0 and w1 values (bsc#1241584)

Affected Systems

  • suse•libraw&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

    < 0.15.4-45.1

References (7)