High severity8.8NVD Advisory· Published Oct 13, 2019· Updated Jun 17, 2026

CVE-2019-17534

Description

vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Libvips/Libvips2 versions
cpe:2.3:a:libvips:libvips:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:libvips:libvips:*:*:*:*:*:*:*:*range: <8.8.2
- (no CPE)range: <8.8.2
libvips/libvipsdescription

Patches

Vulnerability mechanics

References

github.com/libvips/libvips/commit/ce684dd008532ea0bf9d4a1d89bacb35f4a83f4dnvdPatch
github.com/libvips/libvips/compare/v8.8.1...v8.8.2nvdPatch
bugs.chromium.org/p/oss-fuzz/issues/detailnvdExploitIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.002
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000