PT-2020-15278 · Libvips +3 · Libvips +3

Name of the Vulnerable Software and Affected Versions: libvips versions prior to 8.8.2 Description: The issue is related to an uninitialized variable in the im vips2dz function, located in /libvips/libvips/deprecated/im vips2dz.c. This may cause the leakage of the remote server path or stack...

libvips:jpegsave_file_fuzzer: Crash in vips_region_copy

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5758791811596288 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: jpegsavefilefuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x7fa704521000 Crash...

Libvips Reuse After Release Vulnerability

libvips is a demand-driven multithreaded image processing library. A post-release reuse vulnerability exists in versions of libvips prior to 8.8.2, which stems from vipsforeignloadgifscanimage in foreign/gifload.c in libvips attempting to access the color image prior to the DGifGetImageDesc call,...

CVE-2019-17534

vipsforeignloadgifscanimage in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free...

CVE-2019-17534

vipsforeignloadgifscanimage in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free...

CVE-2019-17534

vipsforeignloadgifscanimage in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free...

Design/Logic Flaw

vipsforeignloadgifscanimage in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free...

UBUNTU-CVE-2019-17534

vipsforeignloadgifscanimage in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free...

CVE-2019-17534

vipsforeignloadgifscanimage in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free...

CVE-2019-17534

vipsforeignloadgifscanimage in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free...

CVE-2019-17534

CVE-2019-17534 affects libvips prior to 8.8.2, where vips_foreign_load_gif_scan_image in foreign/gifload.c may access a color map before DGifGetImageDesc, causing a use-after-free. Reports in multiple sources (NVD entry and RH advisories) confirm the vulnerability path in libvips GIF loading. Imp...

CVE-2019-17534

vipsforeignloadgifscanimage in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free...

PT-2019-15192 · Libvips +1 · Libvips +1

Name of the Vulnerable Software and Affected Versions: libvips versions prior to 8.8.2 Description: The issue arises from the vips foreign load gif scan image function in foreign/gifload.c trying to access a color map before the DGifGetImageDesc call, resulting in a use-after-free. Recommendation...

CVE-2019-17534: Use After Free

vipsforeignloadgifscanimage in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free...

libvips:sharpen_fuzzer: Heap-buffer-overflow in exif_entry_get_value

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5114227332743168 Project: libvips Fuzzing Engine: afl Fuzz Target: sharpenfuzzer Job Type: aflasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6020000122f1 Cra...

libvips:jpegsave_file_fuzzer: Crash in colr_color

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5662041322291200 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: jpegsavefilefuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x7f22a2c12000 Crash...

libvips:jpegsave_file_fuzzer: Index-out-of-bounds in make_hI

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5651968818675712 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: jpegsavefilefuzzer Job Type: libfuzzerubsanlibvips Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

libvips:jpegsave_file_fuzzer: Heap-use-after-free in vips_foreign_load_gif_scan_image

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5641864455127040 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: jpegsavefilefuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

libvips:jpegsave_file_fuzzer: Crash in vips_rad2float_line

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5682293519155200 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: jpegsavefilefuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x7f8e216e0000 Crash...

libvips:pngsave_buffer_fuzzer: Heap-buffer-overflow in vips_value_set_array_int

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5730449699110912 Project: libvips Fuzzing Engine: afl Fuzz Target: pngsavebufferfuzzer Job Type: aflasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x611000003c00...