Vulnerabilities > CVE-2023-40032 - Unspecified vulnerability in Libvips

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
libvips
NVD
Published: 2023-09-11
Updated: 2024-11-21

Summary

libvips is a demand-driven, horizontally threaded image processing library. A specially crafted SVG input can cause libvips versions 8.14.3 or earlier to segfault when attempting to parse a malformed UTF-8 character. Users should upgrade to libvips version 8.14.4 (or later) when processing untrusted input.

Vulnerable Configurations

Part Description Count
Application
Libvips
15

References