Post #4326506
2026-08-02 09:13 UTC
@galaxis@mastodon.infra.de uh “this is agent skill” as vuln disclosure is something new. I honestly tried to skim over wall of “skills” text but failed to find the essence of exploitation
Replies (1)
-
@galaxis@mastodon.infra.de 2026-08-02 09:30
@alex@feed.yopp.me Tbh I only read the "The vulnerability in one paragraph" section, everything beyond looks like complete slop for slop processors. Seems like you need to be able to provide a specific version of a matlab file to be routed into a vulnerable decoder for those. I have not immediately seen how to actually triger that, but it reads like the bug is in imagemagick code (not sure if copied over into libvips or by using that as a library).