libvips Null Pointer Dereference Vulnerability in Matrix Load Function

A null pointer dereference vulnerability has been identified in libvips versions through 8.18.0. The issue arises in the function 'vips_foreign_load_matrix_header' within 'libvips/foreign/matrixload.c'. When the matrix loader processes an empty file, it can lead to a crash by dereferencing a null pointer. This vulnerability requires local exploitation.

Impact

Exploitation of this vulnerability causes a process crash due to a segmentation fault, as reported by the AddressSanitizer.

Reproduction

The vulnerability can be reproduced by building libvips with AddressSanitizer enabled, creating an empty matrix file, and then using the 'vips matrixload' command to load the empty file. This triggers the null pointer dereference, causing a crash.

Remediation

Users are advised to update to libvips version 8.19.0 or later, where this vulnerability has been fixed.