Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability has been found in libvips up to 8.18.0. The impacted element is the function vips_foreign_load_matrix_header of the file libvips/foreign/matrixload.c. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The identifier of the patch is d4ce337c76bff1b278d7085c3c4f4725e3aa6ece. To fix this issue, it is recommended to deploy a patch.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-3146 A vulnerability has been found in libvips up to 8.18.0. The impacted element is the function vips_foreign_load_matrix_header of the file libvips/foreign/matrixload.c. T… https://www.cve.org/CVERecord?id=CVE-2026-3146
Post summary
A new CVE-2026-3146 vulnerability was identified in libvips up to version 8.18.0, affecting the vips_foreign_load_matrix_header function, with no PoC, exploit, or patch details provided.
CVE-2026-3146 Null Pointer Dereference Vulnerability in libvips Foreign Matrix Load Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3146
Post summary
A brief notice of CVE-2026-3146, a null pointer dereference in libvips' foreign matrix load function, with a link to a vulnerability details page.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | libvips | libvips | - | - | - |