Llibvips

Products

Exploited and recent CVEs

• CVE-2026-70654 Medium 5.8 libvips: A well-crafted PPM image processed via a custom source could lead to possible heap buffer write overflow 0.1%
• CVE-2026-70653 Medium 4.8 libvips: Possible heap-based buffer read overflow when decoding a well-crafted RLE Radiance image 0.1%
• CVE-2026-70651 Medium 6.9 libvips: Possible integer overflow when reading multi-page TIFF images via ImageMagick 0.1%
• CVE-2026-70652 Low 2.0 libvips: Possible heap-based buffer read overflow when resizing and re-encoding a JPEG with gain map 0.1%
• CVE-2026-69242 High 8.4 libvips: Integer overflow leading to heap buffer overflow leading to possible attacker-controlled mmap-resident write 0.2%
• CVE-2026-35591 High 7.0 Possible heap-based buffer overflow when decoding TIFF image containing well-crafted tile 0.2%
• CVE-2026-35590 Medium 6.8 Possible out-of-bounds read leading to crash when decoding well-crafted EXIF metadata 0.1%
• CVE-2026-33328 Medium 6.8 Possible integer overflow on 32-bit systems when reading GIF images 0.1%
• CVE-2026-33327 High 7.0 Possible integer overflow leading to potential heap-based buffer overflow 0.2%
• CVE-2025-59933 Medium 5.1 libvips is vulnerable to Buffer Over-Read in poppler-based pdfload 0.2%
• CVE-2025-29769 High 8.5 libvips has a potential heap-based buffer overflow when attempting to convert multiband TIFF input to HEIF output 0.3%
• CVE-2023-40032 Medium 5.5 Potential segfault due to NULL pointer dereference in libvips 0.3%