Post #4326505

@alex@feed.yopp.me Tbh I only read the "The vulnerability in one paragraph" section, everything beyond looks like complete slop for slop processors. Seems like you need to be able to provide a specific version of a matlab file to be routed into a vulnerable decoder for those. I have not immediately seen how to actually triger that, but it reads like the bug is in imagemagick code (not sure if copied over into libvips or by using that as a library).