This vulnerability in libvips arises from an integer overflow that occurs during the vipsload operation when image dimensions are miscalculated. The overflow can lead to a heap-based buffer overflow, potentially allowing an attacker to corrupt memory and execute arbitrary code, compromising the confidentiality, integrity, and availability of the affected system.

The flaw affects the libvips image processing library, specifically all releases prior to and including version 8.18.0. Based on the description, it is inferred that an attacker with access to the image loading process could exploit the vulnerability. The fix was applied in libvips 8.18.1.

The CVSS score of 7 flags this issue as high severity, although no public exploits are known and the EPSS score is below 1%, indicating a low probability of exploitation. Based on the description, it is inferred that the vulnerability is most likely exploitable in contexts where an application or service processes untrusted image data via vipsload, which may be local or network based depending on the application's exposure. Given that it is not listed in CISA's KEV catalog, the risk remains moderate but should be mitigated promptly.