libvips is a fast image processing library with low memory needs. The `vipsload` operation in versions before and including 8.18.0 could incorrectly determine image dimensions leading to an integer overflow and a subsequent heap-based buffer overflow. This has been patched in version 8.18.1.
libvips is a fast image processing library with low memory needs. The vipsload operation in versions before and including 8.18.0 could incorrectly determine image dimensions leading to an integer overflow and a subsequent heap-based buffer overflow. This has been patched in version 8.18.1.
Why this VPI (explainable, experimental)
VPI breakdown
| Impact | 70.00 |
| Exploitation signal(No additional exploitation signal) | ×1.00 |
| VPI | 70.00 |
VPI formula vpi-v1