CVE-2023-40032
Potential segfault due to NULL pointer dereference in libvips
Résumé
Potential segfault due to NULL pointer dereference in libvips
Description d'origine
La description telle que publiée par la source (souvent en anglais).
libvips is a demand-driven, horizontally threaded image processing library. A specially crafted SVG input can cause libvips versions 8.14.3 or earlier to segfault when attempting to parse a malformed UTF-8 character. Users should upgrade to libvips version 8.14.4 (or later) when processing untrusted input.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2023-40032 vips Corrigé dans: 8.14.1-3+deb12u1
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- web lists.fedoraproject.org