Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-40032
HistorySep 11, 2023 - 7:15 p.m.

Input validation

2023-09-1119:15:00
PRIOn knowledge base
www.prio-n.com
4
input validation
image processing library
svg
segfault
utf-8
upgrade
untrusted input
nvd

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

libvips is a demand-driven, horizontally threaded image processing library. A specially crafted SVG input can cause libvips versions 8.14.3 or earlier to segfault when attempting to parse a malformed UTF-8 character. Users should upgrade to libvips version 8.14.4 (or later) when processing untrusted input.

CPENameOperatorVersion
libvipsge8.12.0
libvipslt8.14.4

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%