CVE-2023-40032 in libvipsinformación

Resumen

por MITRE • 2023-09-11

libvips is a demand-driven, horizontally threaded image processing library. A specially crafted SVG input can cause libvips versions 8.14.3 or earlier to segfault when attempting to parse a malformed UTF-8 character. Users should upgrade to libvips version 8.14.4 (or later) when processing untrusted input.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

GitHub, Inc.

Reservar

2023-08-08

Divulgación

2023-09-11

Moderación

aceptado

Artículo

VDB-239412

CPE

listo

EPSS

0.00238

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2023-40032
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2023-40032
CVE Detailshttps://www.cvedetails.com/cve/CVE-2023-40032/

◂ AnteriorVisión De ConjuntoPróximo ▸

Interested in the pricing of exploits?

See the underground prices here!