CVE-2026-70652

A flaw was found in libvips, an image processing library. When libvips is built with libultrahdr support, it can incorrectly size an output buffer during the process of enlarging an incoming JPEG to a very large output before encoding a gain map. This undersized allocation can lead to a heap buff...

Linux Distros Unpatched Vulnerability : CVE-2026-70652

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built with libultrahdr support can incorrectly size an output...

CVE-2026-70652 libvips: Possible heap-based buffer read overflow when resizing and re-encoding a JPEG with gain map

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built with libultrahdr support can incorrectly size an output buffer in libvips/foreign/uhdrsave.c within vipsforeignsaveuhdrsetrawhdr when a pipeline enlarges an incoming JPEG to a very large outpu...

CVE-2026-70652 libvips: Possible heap-based buffer read overflow when resizing and re-encoding a JPEG with gain map

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built with libultrahdr support can incorrectly size an output buffer in libvips/foreign/uhdrsave.c within vipsforeignsaveuhdrsetrawhdr when a pipeline enlarges an incoming JPEG to a very large outpu...

CVE-2026-70652: Buffer Over-read

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built with libultrahdr support can incorrectly size an output buffer in libvips/foreign/uhdrsave.c within vipsforeignsaveuhdrsetrawhdr when a pipeline enlarges an incoming JPEG to a very large outpu...

PT-2026-79142

Name of the Vulnerable Software and Affected Versions libvips versions prior to 8.18.3 Description When built with libultrahdr support, the library can incorrectly size an output buffer within the vips foreign save uhdr set raw hdr function in libvips/foreign/uhdrsave.c. This occurs when a pipeli...

libultrahdr:ultrahdr_dec_fuzzer: Heap-buffer-overflow in ultrahdr::IccHelper::readIccColorGamut

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=5433768319188992 Project: libultrahdr Fuzzing Engine: libFuzzer Fuzz Target: ultrahdrdecfuzzer Job Type: libfuzzerasani386libultrahdr Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

libultrahdr:ultrahdr_enc_fuzzer: Heap-buffer-overflow in convsamp

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=5315356366798848 Project: libultrahdr Fuzzing Engine: afl Fuzz Target: ultrahdrencfuzzer Job Type: aflasanlibultrahdr Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libultrahdr:ultrahdr_enc_fuzzer: Use-of-uninitialized-value in format_message

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=6027046000590848 Project: libultrahdr Fuzzing Engine: libFuzzer Fuzz Target: ultrahdrencfuzzer Job Type: libfuzzermsanlibultrahdr Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libultrahdr:ultrahdr_dec_fuzzer: Use-of-uninitialized-value in format_message

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=5279522344206336 Project: libultrahdr Fuzzing Engine: libFuzzer Fuzz Target: ultrahdrdecfuzzer Job Type: libfuzzermsanlibultrahdr Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libultrahdr:ultrahdr_dec_fuzzer: Use-of-uninitialized-value in format_message

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=5389078369992704 Project: libultrahdr Fuzzing Engine: libFuzzer Fuzz Target: ultrahdrdecfuzzer Job Type: libfuzzermsanlibultrahdr Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libultrahdr:ultrahdr_enc_fuzzer: Use-of-uninitialized-value in ultrahdr::uhdr_gainmap_metadata_frac::encodeGainmapMetadata

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=4823210674159616 Project: libultrahdr Fuzzing Engine: libFuzzer Fuzz Target: ultrahdrencfuzzer Job Type: libfuzzermsanlibultrahdr Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libultrahdr:ultrahdr_dec_fuzzer: Heap-buffer-overflow in ultrahdr::getYuv444Pixel

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=4812956699787264 Project: libultrahdr Fuzzing Engine: afl Fuzz Target: ultrahdrdecfuzzer Job Type: aflasanlibultrahdr Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libultrahdr:ultrahdr_dec_fuzzer: Heap-buffer-overflow in ultrahdr::getYuv420Pixel

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=5501633365606400 Project: libultrahdr Fuzzing Engine: honggfuzz Fuzz Target: ultrahdrdecfuzzer Job Type: honggfuzzasanlibultrahdr Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

libultrahdr:ultrahdr_dec_fuzzer: Heap-buffer-overflow in ultrahdr::getYuv420Pixel

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=4708909796360192 Project: libultrahdr Fuzzing Engine: libFuzzer Fuzz Target: ultrahdrdecfuzzer Job Type: libfuzzerasani386libultrahdr Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

libultrahdr:ultrahdr_dec_fuzzer: Heap-buffer-overflow in ultrahdr::getYuv420Pixel

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=4787364974100480 Project: libultrahdr Fuzzing Engine: libFuzzer Fuzz Target: ultrahdrdecfuzzer Job Type: libfuzzerasanlibultrahdr Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

libultrahdr:ultrahdr_dec_fuzzer: Heap-buffer-overflow in ultrahdr::gain_map_metadata::decodeGainmapMetadata

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=5624388803166208 Project: libultrahdr Fuzzing Engine: honggfuzz Fuzz Target: ultrahdrdecfuzzer Job Type: honggfuzzasanlibultrahdr Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

libultrahdr:ultrahdr_dec_fuzzer: Use-of-uninitialized-value in format_message

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=5926544905142272 Project: libultrahdr Fuzzing Engine: libFuzzer Fuzz Target: ultrahdrdecfuzzer Job Type: libfuzzermsanlibultrahdr Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libultrahdr:ultrahdr_enc_fuzzer: Heap-buffer-overflow in convsamp

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=5308537196380160 Project: libultrahdr Fuzzing Engine: afl Fuzz Target: ultrahdrencfuzzer Job Type: aflasanlibultrahdr Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libultrahdr:ultrahdr_enc_fuzzer: Heap-buffer-overflow in convsamp

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=5146379254890496 Project: libultrahdr Fuzzing Engine: afl Fuzz Target: ultrahdrencfuzzer Job Type: aflasanlibultrahdr Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...