Libvips: Malicious CSV File Can Cause Data Corruption

Summary

A security issue in libvips versions up to 8.18.0 can allow an attacker with local access to corrupt data. This can happen if the attacker provides a specially crafted CSV file. To fix this, update libvips to the latest version or apply the provided patch.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
libvips	libvips	<= 8.18.0	–

Original title

A vulnerability was found in libvips up to 8.18.0. This affects the function vips_foreign_load_csv_build of the file libvips/foreign/csvload.c. The manipulation results in heap-based buffer overflo...

Original description

A vulnerability was found in libvips up to 8.18.0. This affects the function vips_foreign_load_csv_build of the file libvips/foreign/csvload.c. The manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has been made public and could be used. The patch is identified as b3ab458a25e0e261cbd1788474bbc763f7435780. It is advisable to implement a patch to correct this issue.

nvd CVSS2.0 4.3

nvd CVSS3.1 7.8

nvd CVSS4.0 4.8

Vulnerability type

CWE-119 Buffer Overflow

CWE-122 Heap-based Buffer Overflow

https://github.com/libvips/libvips/ Product
https://github.com/libvips/libvips/commit/b3ab458a25e0e261cbd1788474bbc763f74357... Patch
https://github.com/libvips/libvips/issues/4874 Exploit Issue Tracking Vendor Advisory
https://github.com/libvips/libvips/issues/4874#issue-3943617697 Exploit Issue Tracking Vendor Advisory
https://github.com/libvips/libvips/pull/4894 Issue Tracking
https://vuldb.com/?ctiid.347653 Permissions Required VDB Entry
https://vuldb.com/?id.347653 Third Party Advisory VDB Entry
https://vuldb.com/?submit.758692 Third Party Advisory VDB Entry