CVE-2019-17534: Use After Free
vipsforeignloadgifscanimage in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-17534?
CVE-2019-17534 is a vulnerability in the libvips library that allows an attacker to exploit a use-after-free vulnerability.
How does CVE-2019-17534 impact libvips?
CVE-2019-17534 affects libvips versions before 8.8.2 and can lead to a use-after-free vulnerability.
What is the severity rating of CVE-2019-17534?
CVE-2019-17534 has a severity rating of 8.8, indicating a high severity level.
How can I fix CVE-2019-17534?
To fix CVE-2019-17534, you need to update libvips to version 8.8.2 or later.
Where can I find more information about CVE-2019-17534?
You can find more information about CVE-2019-17534 at the following references: [link 1](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16796), [link 2](https://github.com/libvips/libvips/commit/ce684dd008532ea0bf9d4a1d89bacb35f4a83f4d), [link 3](https://github.com/libvips/libvips/compare/v8.8.1...v8.8.2)