CVE-2019-17534 — Use After Free in Libvips

CWE-416 — Use After Free8 documents6 sources
Severity
8.8HIGHNVD
EPSS
1.0%
top 23.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
LibvipsDebian Vips
Timeline
PublishedOct 13
Latest updateMar 20

Description

vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶NVDlibvips/libvips< 8.8.2
▶debiandebian/vips

Patches

Patch: github.com ↗Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-4hqm-7w7w-5w4r: vips_foreign_load_gif_scan_image in foreign/gifload↗2022-05-24
▶
OSV
CVE-2019-17534: vips_foreign_load_gif_scan_image in foreign/gifload↗2019-10-13
▶

📋Vendor Advisories

1
Debian
CVE-2019-17534: vips - vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tr...↗2019
▶

📄Research Papers

1
arXiv
Fat Pointers for Temporal Memory Safety of C↗2023-03-20
▶

💬Community

3
Bugzilla
CVE-2019-17534 vips: use-after-free in vips_foreign_load_gif_scan_image in foreign/gifload.c [fedora-30]↗2019-11-06
▶
Bugzilla
CVE-2019-17534 vips: use-after-free in vips_foreign_load_gif_scan_image in foreign/gifload.c↗2019-11-06
▶
Bugzilla
CVE-2019-17534 vips: use-after-free in vips_foreign_load_gif_scan_image in foreign/gifload.c [fedora-29]↗2019-11-06
▶
CVE-2019-17534 — Use After Free in Libvips | cvebase