2 matches found
Lovell Fuller sharp security vulnerability
Versions of Lovell Fuller Sharp prior to 0.35.0 contain a security vulnerability. This vulnerability stems from multiple flaws in the bundled libvips within its GIF, TIFF, and VIPS image decoders. Attackers can supply specially crafted GIF, TIFF, or VIPS files to applications utilizing Sharp to...
8.4CVSS5.9AI score0.00107EPSS
SaveExploits0References3
Lovell Fuller sharp buffer error vulnerability
Versions prior to Lovell Fuller Sharp 0.35.4 contain a buffer error vulnerability. This vulnerability stems from the inclusion of the vulnerable libheif dependency; when processing malicious AVIF/HEIF inputs, it triggers a decoding flaw in libheif, potentially leading to remote code execution...
8.9CVSS6.6AI score0.00241EPSS
SaveExploits0References2
20