tocsin

Alpine/vips: high 8.8

vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free.

Action: Upgrade vips to 8.8.2-r0 or later.

Affected

introducedfixedlast affected
08.8.2-r0-

Fixed versions

8.8.2-r0

Sources

published · modified · JSON