Описание
libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory. This can result in leaking raw process memory contents through the output image.
Ссылки
- Technical DescriptionThird Party Advisory
- PatchThird Party Advisory
- Third Party Advisory
- Technical DescriptionThird Party Advisory
- PatchThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
EPSS
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
Связанные уязвимости
libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory. This can result in leaking raw process memory contents through the output image.
libvips before 8.7.4 generates output images from uninitialized memory ...
libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory. This can result in leaking raw process memory contents through the output image.
ALT-PU-2020-1098: package `vips` update to version 8.9.0-alt2
EPSS
5.3 Medium
CVSS3
5 Medium
CVSS2