« List of all CVEs

CVE-2020-20739

Published: 11/20/2020 Last updated: 8/4/2024 Reserved: 8/13/2020

im_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an uninitialized variable which may cause the leakage of remote server path or stack address.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (1)

conf-vips

Products affected (1)

Product Vendor Version
n/a n/a 10 Version 1709 for 32-bit Systems

References (8)