CVE-2026-70651

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built without libtiff support but with ImageMagick support can overflow the combined frame height while loading a crafted multi-page TIFF through VipsForeignLoadMagick. The vulnerable calculations i...

EUVD-2026-63653

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built without libtiff support but with ImageMagick support can overflow the combined frame height while loading a crafted multi-page TIFF through VipsForeignLoadMagick. The vulnerable calculations i...

CVE-2026-70651 libvips: Possible integer overflow when reading multi-page TIFF images via ImageMagick

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built without libtiff support but with ImageMagick support can overflow the combined frame height while loading a crafted multi-page TIFF through VipsForeignLoadMagick. The vulnerable calculations i...

CVE-2026-70651: Integer Overflow to Buffer Overflow

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built without libtiff support but with ImageMagick support can overflow the combined frame height while loading a crafted multi-page TIFF through VipsForeignLoadMagick. The vulnerable calculations i...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099487)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099487 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, the MNG decoder contains a...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099463)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099463 advisory. In versions prior to 7.1.2-26he, the -concatenate operation is missing policy checks, potentially resulting in both reading and writing to paths disallowed by the...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099476)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099476 advisory. ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation limit in matrix-backed operations such as -canny. An attacker can supp...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099485)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099485 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when identifying an image wi...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099536)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099536 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when providing invalid...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099507)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099507 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, an integer overflow in the X...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099454)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099454 advisory. ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this memory leak by...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099453)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099453 advisory. ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can write...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099498)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099498 advisory. ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099456)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099456 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a missing depth check in the...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099490)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099490 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 6.9.13-51 and 7.0.1-0 and above prior to 7.1.2-26...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099474)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099474 advisory. ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099483)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099483 advisory. ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099455)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099455 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a heap buffer overflow occur...

Fedora 45 : GraphicsMagick / ImageMagick / OpenImageIO / OpenImageIO2.5 / etc (2026-823e06dfcf)

The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-823e06dfcf advisory. Updated xeve/xevd, updated openapv and updated vapoursynth. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 46 : GraphicsMagick / ImageMagick / OpenImageIO / OpenImageIO2.5 / etc (2026-b8ff7153f1)

The remote Fedora 46 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-b8ff7153f1 advisory. Updated xeve/xevd, updated openapv and updated vapoursynth. Tenable has extracted the preceding description block directly from the Fedora security...