Lucene search
+L

134 matches found

OSV
OSV
added 2026/02/22 4:15 a.m.12 views

UBUNTU-CVE-2026-2913

A vulnerability was determined in libvips up to 8.19.0. The affected element is the function vipssourcereadtomemory of the file libvips/iofuncs/source.c. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The attack's complexity is rated as...

7CVSS5.4AI score0.00182EPSS
SaveExploits1References10
ATTACKERKB
ATTACKERKB
added 2026/02/22 4:02 a.m.11 views

CVE-2026-2913

A vulnerability was determined in libvips up to 8.19.0. The affected element is the function vipssourcereadtomemory of the file libvips/iofuncs/source.c. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The attack's complexity is rated as...

2.5CVSS5.2AI score0.00182EPSS
SaveExploits1References8
CVE
CVE
added 2026/02/22 4:02 a.m.90 views

CVE-2026-2913

CVE-2026-2913 (libvips) : A heap-based buffer overflow is triggered in vips_source_read_to_memory within libvips/iofuncs/source.c, affecting libvips up to 8.19.0. The vulnerability can be exploited locally, with high attack complexity and high impact on availability and integrity as described. Th...

7CVSS4.7AI score0.00182EPSS
SaveExploits1References8Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/22 4:02 a.m.6 views

CVE-2026-2913 libvips source.c vips_source_read_to_memory heap-based overflow

A vulnerability was determined in libvips up to 8.19.0. The affected element is the function vipssourcereadtomemory of the file libvips/iofuncs/source.c. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The attack's complexity is rated as...

2.5CVSS4AI score0.00182EPSS
SaveExploits1References8
OSV
OSV
added 2026/02/22 4:02 a.m.12 views

CVE-2026-2913 libvips source.c vips_source_read_to_memory heap-based overflow

A vulnerability was determined in libvips up to 8.19.0. The affected element is the function vipssourcereadtomemory of the file libvips/iofuncs/source.c. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The attack's complexity is rated as...

2CVSS5.4AI score
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/02/22 12:00 a.m.20 views

PT-2026-21413

A vulnerability was determined in libvips up to 8.19.0. The affected element is the function vips source read to memory of the file libvips/iofuncs/source.c. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The attack's complexity is rate...

2.5CVSS5.2AI score0.00182EPSS
SaveExploits1References9
Fedora
Fedora
added 2025/12/18 1:12 a.m.17 views

[SECURITY] Fedora 42 Update: vips-8.17.3-1.fc42

VIPS is an image processing library. It is good for very large images even larger than the amount of RAM in your machine, and for working with color. This package should be installed if you want to use a program compiled against VIPS...

7.8CVSS6.9AI score0.00189EPSS
SaveExploits0
Fedora
Fedora
added 2025/12/18 12:59 a.m.14 views

[SECURITY] Fedora 43 Update: vips-8.17.3-1.fc43

VIPS is an image processing library. It is good for very large images even larger than the amount of RAM in your machine, and for working with color. This package should be installed if you want to use a program compiled against VIPS...

7.8CVSS6.9AI score0.00189EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2025/12/18 12:00 a.m.4 views

Fedora: Security Advisory (FEDORA-2025-107641b428)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.5AI score0.00189EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2025/12/18 12:00 a.m.6 views

Fedora: Security Advisory (FEDORA-2025-d9707059b7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.5AI score0.00189EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/12/18 12:00 a.m.9 views

Fedora 42 : vips (2025-107641b428)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-107641b428 advisory. New version of vips. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for th...

7.8CVSS5.5AI score0.00189EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/12/18 12:00 a.m.8 views

Fedora 43 : vips (2025-d9707059b7)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-d9707059b7 advisory. New version of vips. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for th...

7.8CVSS5.5AI score0.00189EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2010-3362

Malware in sbrugna...

6.9CVSS6AI score0.00432EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2025/10/03 11:36 p.m.6 views

SUSE CVE-2025-59933

libvips is a demand-driven, horizontally threaded image processing library. For versions 8.17.1 and below, when libvips is compiled with support for PDF input via poppler, the pdfload operation is affected by a buffer read overflow when parsing the header of a crafted PDF with a page that defines...

7.8CVSS7.2AI score0.00189EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/10/02 4:24 p.m.7 views

CVE-2025-59933

libvips is a demand-driven, horizontally threaded image processing library. For versions 8.17.1 and below, when libvips is compiled with support for PDF input via poppler, the pdfload operation is affected by a buffer read overflow when parsing the header of a crafted PDF with a page that defines...

5.1CVSS6.7AI score0.00189EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/09/29 10:43 p.m.12 views

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read in the pdfload process, if compiled with support for PDF input via Poppler. An attacker can cause the application to read beyond the bounds of allocated memory by submitting a specially crafted PDF document with media...

7.8CVSS6.8AI score0.00189EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2025/05/05 12:00 a.m.21 views

Debian: Security Advisory (DSA-5915-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.5CVSS6.7AI score0.00283EPSS
SaveExploits1References2
Debian
Debian
added 2025/05/03 5:35 a.m.43 views

[SECURITY] [DSA 5915-1] vips security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5915-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 03, 2025 https://www.debian.org/security/faq -...

8.5CVSS6.9AI score0.00283EPSS
SaveExploits1
OSV
OSV
added 2025/05/03 12:00 a.m.9 views

DSA-5915-1 vips - security update

Bulletin has no description...

8.5CVSS7.2AI score0.00283EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2025/05/03 12:00 a.m.27 views

Debian dsa-5915 : gir1.2-vips-8.0 - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5915 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5915-1 [email protected] https://www.debian.org/security/...

8.5CVSS6.7AI score0.00283EPSS
SaveExploits1References4
Rows per page
Query Builder