Libvips vulnerabilities

Products

• Libvips 25

Newest

• libvips libvips: A well-crafted PPM image processed via a custom source could lead to possible heap buffer write overflow CVE-2026-70654 Fix available 5.8 MediumAugust 20, 2026
• libvips libvips: Possible heap-based buffer read overflow when decoding a well-crafted RLE Radiance image CVE-2026-70653 Fix available 4.8 MediumAugust 20, 2026
• libvips libvips: Possible integer overflow when reading multi-page TIFF images via ImageMagick CVE-2026-70651 Fix available 6.9 MediumAugust 20, 2026
• libvips libvips: Possible heap-based buffer read overflow when resizing and re-encoding a JPEG with gain map CVE-2026-70652 Fix available 2.0 LowAugust 20, 2026
• libvips libvips: Integer overflow leading to heap buffer overflow leading to possible attacker-controlled mmap-resident write CVE-2026-69242 Fix available 8.4 HighAugust 20, 2026
• libvips Possible heap-based buffer overflow when decoding TIFF image containing well-crafted tile CVE-2026-35591 Fix available 7.0 HighJuly 20, 2026
• libvips Possible out-of-bounds read leading to crash when decoding well-crafted EXIF metadata CVE-2026-35590 Fix available 6.8 MediumJuly 20, 2026
• libvips Possible integer overflow on 32-bit systems when reading GIF images CVE-2026-33328 Fix available 6.8 MediumJuly 20, 2026
• libvips Possible integer overflow leading to potential heap-based buffer overflow CVE-2026-33327 Fix available 7.0 HighJuly 20, 2026
• libvips libvips extract.c vips_extract_area_build integer overflow CVE-2026-3284 Fix available 4.8 MediumFebruary 27, 2026
• libvips libvips extract.c vips_extract_band_build out-of-bounds CVE-2026-3283 Fix available 4.8 MediumFebruary 27, 2026
• libvips libvips unpremultiply.c vips_unpremultiply_build out-of-bounds CVE-2026-3282 Fix available 4.8 MediumFebruary 27, 2026
• libvips libvips bandrank.c vips_bandrank_build heap-based overflow CVE-2026-3281 Fix available 4.8 MediumFebruary 27, 2026
• libvips libvips csvload.c vips_foreign_load_csv_build heap-based overflow CVE-2026-3147 Fix available 4.8 MediumFebruary 25, 2026
• libvips libvips matrixload.c vips_foreign_load_matrix_header null pointer dereference CVE-2026-3146 Fix available 4.8 MediumFebruary 25, 2026
• libvips libvips matrixload.c vips_foreign_load_matrix_header memory corruption CVE-2026-3145 Fix available 4.8 MediumFebruary 25, 2026
• libvips libvips source.c vips_source_read_to_memory heap-based overflow CVE-2026-2913 Fix available 2.0 LowFebruary 22, 2026
• libvips libvips is vulnerable to Buffer Over-Read in poppler-based pdfload CVE-2025-59933 Fix available 5.1 MediumSeptember 29, 2025
• libvips, debian linux +1 more libvips has a potential heap-based buffer overflow when attempting to convert multiband TIFF input to HEIF output CVE-2025-29769 Fix available 8.5 HighApril 7, 2025
• libvips, fedoraproject fedora +1 more Potential segfault due to NULL pointer dereference in libvips CVE-2023-40032 Fix available 5.5 MediumSeptember 11, 2023
• libvips Division-By-Zero vulnerability in Libvips 8.10.5 in the function vips_eye_point, eye.c#L83, and... CVE-2021-27847 Fix available 6.5 MediumJuly 15, 2021
• libvips, debian linux, fedoraproject fedora +2 more im_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an... CVE-2020-20739 Fix available 5.3 MediumNovember 20, 2020
• libvips vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a... CVE-2019-17534 Fix available 8.8 HighOctober 13, 2019
• libvips libvips before 8.7.4 generates output images from uninitialized memory locations when processing... CVE-2019-6976 Fix available 5.3 MediumJanuary 26, 2019
• libvips, debian linux +1 more In libvips before 8.6.3, a NULL function pointer dereference vulnerability was found in the... CVE-2018-7998 Fix available 7.5 HighMarch 9, 2018