The following vulnerability was published for libraw.
CVE-2025-43964[0]:
| In LibRaw before 0.21.4, tag 0x412 processing in phase_one_correct
| in decoders/load_mfbacks.cpp does not enforce minimum w0 and w1
| values.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.