LibRaw Out-of-Bounds Access Vulnerability in 0x041f Tag Processing

A vulnerability allowing out-of-bounds access has been identified in LibRaw versions prior to 0.21.4. The issue arises in the 'phase_one_correct' function within 'decoders/load_mfbacks.cpp', where the 'split_col' and 'split_row' values are not properly validated during the processing of the 0x041f tag.

Impact

Exploitation of this vulnerability leads to out-of-bounds access, which can potentially be exploited to cause a denial-of-service condition or to execute arbitrary code.

Remediation

Users are advised to update to LibRaw version 0.21.4 or later.