CVE-2026-3283

A flaw was found in libvips. A local attacker can exploit this vulnerability by manipulating the extractband argument when calling the vipsextractbandbuild function. This can lead to an out-of-bounds read, potentially disclosing sensitive information...