Description

A flaw has been found in libvips up to 8.18.0. The affected element is the function vips_foreign_load_matrix_file_is_a/vips_foreign_load_matrix_header of the file libvips/foreign/matrixload.c. Executing a manipulation can lead to memory corruption. The attack needs to be launched locally. This patch is called d4ce337c76bff1b278d7085c3c4f4725e3aa6ece. A patch should be applied to remediate this issue.

INFO

Published Date :

2026-02-25T02:02:10.604Z

Last Modified :

2026-02-25T20:28:56.023Z

Source :

VulDB
AFFECTED PRODUCTS

The following products are affected by CVE-2026-3145 vulnerability.

Vendors Products
Libvips
  • Libvips
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-3145.

URL Resource
https://github.com/libvips/libvips/ cve-icon cve-icon
https://github.com/libvips/libvips/commit/d4ce337c76bff1b278d7085c3c4f4725e3aa6ece cve-icon cve-icon
https://github.com/libvips/libvips/issues/4876 cve-icon cve-icon
https://github.com/libvips/libvips/pull/4888 cve-icon cve-icon
https://vuldb.com/?ctiid.347651 cve-icon cve-icon
https://vuldb.com/?id.347651 cve-icon cve-icon
https://vuldb.com/?submit.758690 cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact
Detailed values of each vector for above chart.
Access Vector
Access Complexity
Authentication
Confidentiality Impact
Integrity Impact
Availability Impact