CyberRota Analysis
AI-GeneratedVersions of libvips prior to 8.18.2 are vulnerable due to the EXIF decoder's failure to validate the range of EXIF tag groups, which can result in a null pointer dereference and subsequent application crash. Users and developers relying on libvips for image processing should prioritize upgrading to version 8.18.2 or later to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
libvips is a fast image processing library with low memory needs. The EXIF decoder within libvips versions before and including 8.18.1 was not verifying the range of EXIF tag groups before passing data to libexif, leading to a possible null pointer dereference and crash. This has been patched in version 8.18.2.