Servers and applications
CVE-2020-20739
im_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an uninitialized variable which may cause the leakage of remote server path or stack address.
- Severity
- Medium 5.3
- Published
- 20 Nov 2020
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 8.8.2
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
libvipsServers and applications · cpe:a:libvips:libvips |
|