CVE-2026-3282

A flaw was found in libvips. A local attacker can exploit this vulnerability by manipulating the alphaband argument in the vipsunpremultiplybuild function, leading to an out-of-bounds read. This can potentially disclose sensitive information...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the vipsunpremultiplybuild function in the file unpremultiply.c when processing the alphaband argument. An attacker can access sensitive information by triggering an out-of-bounds read through local manipulation o...

EUVD-2026-8989

A flaw has been found in libvips 8.19.0. This vulnerability affects the function vipsunpremultiplybuild of the file libvips/conversion/unpremultiply.c. Executing a manipulation of the argument alphaband can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been...

CVE-2026-3282

The CVE-2026-3282 entry affects libvips 8.19.0, specifically the vips_unpremultiply_build function in libvips/conversion/unpremultiply.c. The vulnerability arises when manipulating the alpha_band argument, which can cause an out-of-bounds read. Exploitation is described as local, and multiple sou...