Skip to content
NewA calmer, faster ZeroHour
Advisorylow

USN-8755-1: libvips vulnerability

Ubuntu Security Notices ()1
Read at ubuntu.com
AI summary · glm-5.3Summaries by Vani AI

Ubuntu patches libvips flaw where crafted TIFF images converted to HEIF cause a crash, enabling denial of service.

USN-8755-1 fixes a libvips vulnerability in which specially crafted TIFF images are incorrectly handled when saved as HEIF, causing the library to crash. The impact is limited to denial of service with no code execution indicated. Ubuntu shipped updated packages.

Key facts
  • Crafted TIFF images mishandled during HEIF conversion crash libvips
  • Impact limited to denial of service, no code execution indicated
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
denial-of-serviceheifimage-processinglibvipstiffubuntuusn-8755-1

From the original article

It was discovered that libvips incorrectly handled specially crafted TIFF images when saving them as HEIF images. An attacker could possibly use this issue to cause libvips to crash, resulting in a denial of service.

Ubuntu Security Notices

ubuntu.com

Read the full article at Ubuntu Security Notices

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.