Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in libvips up to 8.18.0. The affected element is the function vips_foreign_load_matrix_file_is_a/vips_foreign_load_matrix_header of the file libvips/foreign/matrixload.c. Executing a manipulation can lead to memory corruption. The attack needs to be launched locally. This patch is called d4ce337c76bff1b278d7085c3c4f4725e3aa6ece. A patch should be applied to remediate this issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-3145 Memory Corruption Vulnerability in libvips Through Matrix File Loading Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3145
Post summary
A memory corruption vulnerability (CVE-2026-3145) in libvips' matrix file loading function has been disclosed, with no PoC, exploit, or patch details provided.
CVE-2026-3145 A flaw has been found in libvips up to 8.18.0. The affected element is the function vips_foreign_load_matrix_file_is_a/vips_foreign_load_matrix_header of the file libvi… https://www.cve.org/CVERecord?id=CVE-2026-3145
Post summary
A new vulnerability, CVE-2026-3145, has been identified in libvips up to version 8.18.0, affecting specific functions, with no PoC, exploit, or patch details provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | libvips | libvips | - | - | - |