[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2023-40032":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":23,"technologies":26,"references":29,"score":34,"epss_score":35,"epss_percentile":36,"is_kev":20,"cisa_kev_date_added":37,"cisa_kev_due_date":37,"cisa_ssvc":38,"attack_mappings":44,"exploits":51},339967,"CVE-2023-40032","EUVD-2023-44643","libvips is a demand-driven, horizontally threaded image processing library. A specially crafted SVG input can cause libvips versions 8.14.3 or earlier to segfault when attempting to parse a malformed UTF-8 character. Users should upgrade to libvips version 8.14.4 (or later) when processing untrusted input.","2023-09-11T19:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":17,"attackComplexity":18,"availabilityImpact":19,"privilegesRequired":18,"confidentialityImpact":17},"UNCHANGED","3.1",5.5,"LOCAL","MEDIUM","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H","NONE","LOW","HIGH",false,[22],"CWE-476",[24,25],"cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*","cpe:2.3:a:libvips:libvips:*:*:*:*:*:*:*:*",[27,28],"Libvips Libvips","Fedoraproject Fedora",[30,31,32,33],"https:\u002F\u002Fgithub.com\u002Flibvips\u002Flibvips\u002Fcommit\u002Fe091d65835966ef56d53a4105a7362cafdb1582b","https:\u002F\u002Fgithub.com\u002Flibvips\u002Flibvips\u002Fpull\u002F3604","https:\u002F\u002Fgithub.com\u002Flibvips\u002Flibvips\u002Fsecurity\u002Fadvisories\u002FGHSA-33qp-9pq7-9584","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FYU2FFC47X2XDEGEHEWAGLU5L3R6FEYD2\u002F",0.28,0.00252,0.16459,null,{"timestamp":37,"automatable":39,"tech_impact":40,"exploitation":41,"cisa_decision":42,"cisa_remediation_timeline":43},"no","partial","none",{},"FSU",[45],{"name":46,"source":47,"tactics":48,"technique_id":50},"Exploitation for Privilege Escalation","attack_vector",[49],"privilege-escalation","T1068",[]]