CVE-2026-35590 Possible out-of-bounds read leading to crash when decoding well-crafted EXIF metadata

libvips is a fast image processing library with low memory needs. The EXIF decoder within libvips versions before and including 8.18.1 was not verifying the range of EXIF tag groups before passing data to libexif, leading to a possible null pointer dereference and crash. This has been patched in...

Linux Distros Unpatched Vulnerability : CVE-2026-33327

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libvips is a fast image processing library with low memory needs. The vipsload operation in versions before and including 8.18.0 could incorrectly determine ima...

CVE-2026-3282

A flaw has been found in libvips 8.19.0. This vulnerability affects the function vipsunpremultiplybuild of the file libvips/conversion/unpremultiply.c. Executing a manipulation of the argument alphaband can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been...

libvips 安全漏洞

libvips is an open-source fast image processing library with low memory requirements. Versions of libvips 8.18.0 and earlier contained security vulnerabilities, which stemmed from a null pointer dereferencing issue in the function located in the file libvips/foreign/matrixload.c...

DEBIAN-CVE-2025-29769

libvips is a demand-driven, horizontally threaded image processing library. The heifsave operation could incorrectly determine the presence of an alpha channel in an input when it was not possible to determine the colour interpretation, known internally within libvips as "multiband". There aren't...

Libvips 数字错误漏洞

libvips is an open source 2D image processing library. libvips version 8.10.5 is vulnerable due to a dezero vulnerability in function "vipseyepoint, eye.cL83" and function "vipsmaskpoint, mask.cL85". No detailed vulnerability details are available at this time...

PT-2021-6807 · Libvips +3 · Libvips +3

Name of the Vulnerable Software and Affected Versions: Libvips version 8.10.5 Description: The issue is related to a Division-By-Zero vulnerability in the functions vips eye point and vips mask point of the Libvips library. This vulnerability is caused by the lack of a check for division by zero...