libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory. This can result in leaking raw process memory contents through the output image.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2019-01-26T23:00:00
Updated: 2024-08-04T20:38:32.597Z
Reserved: 2019-01-26T00:00:00
Link: CVE-2019-6976
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2019-01-26T23:29:00.237
Modified: 2023-09-29T11:18:03.783
Link: CVE-2019-6976
Redhat
No data.