Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

libvips

A flaw has been found in libvips up to 8.18.0. The affected element is the function vips_foreign_load_matrix_file_is_a/vips_foreign_load_matrix_header of the file libvips/foreign/matrixload.c. Executing a manipulation can lead to memory corruption. The attack needs to be launched locally. This patch is called d4ce337c76bff1b278d7085c3c4f4725e3aa6ece. A patch should be applied to remediate this issue.

CVE-2026-3145 identifies a memory corruption vulnerability in libvips, an open-source image processing library widely used for efficient image transformations. The flaw resides in the matrix loading functionality within the file libvips/foreign/matrixload.c, specifically in the functions vips_foreign_load_matrix_file_is_a and vips_foreign_load_matrix_header. These functions handle loading matrix files, and improper handling of input data can lead to memory corruption. This vulnerability requires local access to the system, meaning an attacker must have some level of local privileges to trigger the flaw. The vulnerability does not require user interaction or elevated privileges beyond local access, but the attacker must be able to manipulate the input to these functions. Memory corruption can lead to unpredictable behavior including crashes, data leakage, or potential code execution depending on the exploitation context. The vulnerability affects all libvips versions from 8.0 through 8.18.0. A patch identified by commit d4ce337c76bff1b278d7085c3c4f4725e3aa6ece has been released to remediate the issue. No known exploits have been reported in the wild, and the CVSS v4.0 base score is 4.8, reflecting a medium severity level due to the local attack vector and limited scope of impact. Organizations relying on libvips for image processing should prioritize applying the patch to prevent potential exploitation.

Detailed information about CVE-2026-3145: Memory Corruption in libvips affecting null libvips. Get real-time updates, technical details, and mitigation strategi

CVE-2026-3145: Memory Corruption in libvips - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-3145: Memory Corruption in libvips

Threats Tagged 'cve-2026-3145'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-3145'

Lead Pen Test Professional