Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory. This can result in leaking raw process memory contents through the output image.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
libvips 信息泄露漏洞
Vulnerability Description
libvips是一款开源的2D图像处理库。 libvips 8.7.4之前版本存在信息泄露漏洞，该漏洞源于Libvips在处理损坏的输入图像数据时从未初始化的内存位置生成输出图像，因为iofuncs/memory.c不会将已分配的内存归零。这可能导致原始进程内存泄漏。
CVSS Information
N/A
Vulnerability Type
N/A