漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
libvips is vulnerable to Buffer Over-Read in poppler-based pdfload
Vulnerability Description
libvips is a demand-driven, horizontally threaded image processing library. For versions 8.17.1 and below, when libvips is compiled with support for PDF input via poppler, the pdfload operation is affected by a buffer read overflow when parsing the header of a crafted PDF with a page that defines a width but not a height. Those using libvips compiled without support for PDF input are unaffected as well as thosewith support for PDF input via PDFium. This issue is fixed in version 8.17.2. A workaround for those affected is to block the VipsForeignLoadPdf operation via vips_operation_block_set, which is available in most language bindings, or to set VIPS_BLOCK_UNTRUSTED environment variable at runtime, which will block all untrusted loaders including PDF input via poppler.
CVSS Information
N/A
Vulnerability Type
缓冲区上溢读取
Vulnerability Title
libvips 安全漏洞
Vulnerability Description
libvips是libvips开源的一个具有低内存需求的快速图像处理库。 libvips 8.17.1及之前版本存在安全漏洞，该漏洞源于解析特制PDF文件头时存在缓冲区读取溢出。
CVSS Information
N/A
Vulnerability Type
N/A