CVE-2026-35591

A flaw was found in libvips, an image processing library. The tiffload operation, which handles loading TIFF images, could incorrectly identify the number of channels in embedded JPEG or JPEG2000 tiles. This vulnerability may allow a local attacker with low privileges to trigger a buffer overflow...