| Package | Affected versions | Patched versions |
|---|---|---|
| libvips | < 8.7.4 | 8.7.4 |
libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory. This can result in leaking raw process memory contents through the output image.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free