Heap-buffer-overflow in libvips: jxl::N_AVX2::BlendingStage::ProcessPaddingRow
Summary
OSV-2022-305: Heap-buffer-overflow in jxl::N_AVX2::BlendingStage::ProcessPaddingRow. Affects libvips versions >= dc07b0005960687b7ec541b0a3714210e1e16f6a, < 43db3985d0c0f0321434f2bd1cda36c7dd4fa1e5. Fixed in 43db3985d0c0f0321434f2bd1cda36c7dd4fa1e5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libvips is an open-source image processing library that provides a wide range of functionalities for manipulating images. It is commonly used in various applications and frameworks to perform tasks such as resizing, cropping, and applying filters to images. However, a vulnerability has been discovered in libvips that can lead to a heap-buffer-overflow when processing padding rows in the jxl::N_AVX2::BlendingStage module.
Vulnerability Detail
The vulnerability arises due to a heap-buffer-overflow read issue in the jxl::N_AVX2::BlendingStage::ProcessPaddingRow function of libvips. This can be triggered when rendering padding rows in the LowMemoryRenderPipeline module. An attacker could exploit this vulnerability to read beyond the boundaries of allocated memory, potentially leading to information disclosure or a crash. The issue has been reported to the OSS-Fuzz project and a detailed report can be found at the provided link.
How To Fix
Minimum fixed version
43db3985d0c0f0321434f2bd1cda36c7dd4fa1e5
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
At the moment, no specific workaround has been provided for this vulnerability. It is advised to update to the fixed version of libvips as soon as possible.
Conclusion
In conclusion, a heap-buffer-overflow vulnerability has been discovered in libvips that can be triggered when processing padding rows. It is crucial for users of libvips to update their installations to a version that includes the fix. For further support and assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for libvips →
FAQ
libvips is an open-source image processing library used for various image manipulation tasks.
This vulnerability can potentially lead to information disclosure or a crash when processing padding rows in libvips.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it for any open-source vulnerabilities, including this one.
Yes, a fix has been released for this vulnerability. Users should update their libvips installation to a version that includes the fix.
You can find more information about this vulnerability in the OSS-Fuzz report linked in the vulnerability details.
References
Related vulnerabilities
Recent vulnerabilities recorded for libvips.
