Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was found in libvips up to 8.18.0. This affects the function vips_foreign_load_csv_build of the file libvips/foreign/csvload.c. The manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has been made public and could be used. The patch is identified as b3ab458a25e0e261cbd1788474bbc763f7435780. It is advisable to implement a patch to correct this issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-3147 Heap-Based Buffer Overflow in libvips CSV Loading Function Up to 8.18.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3147
Post summary
A heap‑based buffer overflow vulnerability (CVE‑2026‑3147) was disclosed in libvips CSV loading function up to version 8.18.0, with no PoC, exploit, or patch details provided.
CVE-2026-3147 A vulnerability was found in libvips up to 8.18.0. This affects the function vips_foreign_load_csv_build of the file libvips/foreign/csvload.c. The manipulation results… https://www.cve.org/CVERecord?id=CVE-2026-3147
Post summary
A vulnerability in libvips up to version 8.18.0 affecting the vips_foreign_load_csv_build function was identified, but no PoC, exploit, patch, or active exploitation details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | libvips | libvips | - | - | - |