This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-3145 | BDVDB-2026-317231 Detail

libvips

Description#

A flaw has been found in libvips up to 8.18.0. The affected element is the function vips_foreign_load_matrix_file_is_a/vips_foreign_load_matrix_header of the file libvips/foreign/matrixload.c. Executing a manipulation can lead to memory corruption. The attack needs to be launched locally. This patch is called d4ce337c76bff1b278d7085c3c4f4725e3aa6ece. A patch should be applied to remediate this issue.

Impact#

Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact low. Attack vector: local.

Weaknesses#

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.