CVE-2019-6976

libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not…

published January 26, 2019

CVSS
—
EPSS
2%
Percentile
83.1
In the wild
Unconfirmed
What it is

libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory. This can result in leaking raw process memory contents through the output image.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02297 · 83.1th percentile
Published
2019-01-26T23:00Z
EPSS history
Timeline
  • 26 JAN 23:00Z
    libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not…
    cvelistv5