PT-2026-61635

🗓️ 20 Jul 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 29 Views

Libvips EXIF range check bug in versions up to 8.18.1 caused crash; fixed in 8.18.2.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affects IBM Db2 Big SQL on IBM Software Hub	10 Sep 202610:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in js-yaml affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	25 Aug 202618:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Application Modernization Accelerator is affected by multiple vulnerabilities found in Java, JavaScript and IBM WebSphere Application Server Liberty	28 Aug 202610:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses nanoid-3.3.11.tgz which is vulnerable to CVE-2026-67213, CVE-2026-67214	31 Aug 202618:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization	13 Oct 202618:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in js-yaml (CVE-2026-59869)	21 Sep 202607:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex	20 Jul 202615:47	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability in JavaScript affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak	9 Oct 202613:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (September 2026 - Part 1 of 2)	7 Oct 202622:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses js-yaml-4.1.1.tgz which is vulnerable to multiple CVEs.	27 Aug 202619:42	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-67213
osv	www.osv.dev/vulnerability/CVE-2026-67214
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-35591
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-59869
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-HI83908.json
osv	www.osv.dev/vulnerability/CLEANSTART-2026-HI83908
osv	www.osv.dev/vulnerability/CVE-2026-59869
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-XP70950.json
osv	www.osv.dev/vulnerability/CVE-2026-41907
github	www.github.com/libvips/libvips/pull/4972

18 Sep 2026 00:00Current

6Medium risk

Vulners AI Score6

CVSS 46.8 - 8.2

CVSS 3.17.5 - 7.8

EPSS0.00587

SSVC

libvips exif data range check bug null pointer crash version 8.18.1 version 8.18.2