A vulnerability in LibRaw versions before 0.21.4 allows out-of-buffer access due to unchecked split_col and split_row values during processing of the 0x041f tag in the phase_one_correct function within decoders/load_mfbacks.cpp. This flaw can lead to a low-severity denial of service or crash.