CVE-2026-3147 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was found in libvips up to 8.18.0. This affects the function vips_foreign_load_csv_build of the file libvips/foreign/csvload.c. The manipulation…
Medium CVSS: 4.8

CVE-2026-3147

A vulnerability was found in libvips up to 8.18.0. This affects the function vips_foreign_load_csv_build of the file libvips/foreign/csvload.c. The manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has been made public and could be used. The patch is identified as b3ab458a25e0e261cbd1788474bbc763f7435780. It is advisable to implement a patch to correct this issue.
Vendor
Libvips
Product
Libvips
CWE
CWE-119
Yayın Tarihi
2026-02-25 04:16:05
Güncelleme
2026-02-25 20:54:52
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-119 Libvips MEDIUM Libvips 2026

Referanslar

https://github.com/libvips/libvips/ https://github.com/libvips/libvips/commit/b3ab458a25e0e261cbd1788474bbc763f7435780 https://github.com/libvips/libvips/issues/4874 https://github.com/libvips/libvips/issues/4874#issue-3943617697 https://github.com/libvips/libvips/pull/4894 https://vuldb.com/?ctiid.347653 https://vuldb.com/?id.347653 https://vuldb.com/?submit.758692