CyberRota Analysis
AI-GeneratedThe `vipsload` operation in libvips versions up to and including 8.18.0 is vulnerable to an integer overflow that can result in a heap-based buffer overflow, potentially allowing an attacker to execute arbitrary code or crash the application. Users of libvips, particularly those utilizing the library for image processing in critical applications, should prioritize updating to version 8.18.1 or later to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
libvips is a fast image processing library with low memory needs. The `vipsload` operation in versions before and including 8.18.0 could incorrectly determine image dimensions leading to an integer overflow and a subsequent heap-based buffer overflow. This has been patched in version 8.18.1.