Advisories · Technology
libvips.
Every CVE that names libvips among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.8 Medium
libvips: A well-crafted PPM image processed via a custom source could lead to possible heap buffer write overflow
- libvips
- Memory corruption
- CVSS 4.8 Medium
libvips: Possible heap-based buffer read overflow when decoding a well-crafted RLE Radiance image
- libvips
- Memory corruption
- CVSS 6.9 Medium
libvips: Possible integer overflow when reading multi-page TIFF images via ImageMagick
- libvips
- Memory corruption
- CVSS 2.0 Low
libvips: Possible heap-based buffer read overflow when resizing and re-encoding a JPEG with gain map
- libvips
- CWE-126
- CVSS 8.4 High
libvips: Integer overflow leading to heap buffer overflow leading to possible attacker-controlled mmap-resident write
- libvips
- Memory corruption
- CVSS 7.0 High
Possible heap-based buffer overflow when decoding TIFF image containing well-crafted tile
- libvips
- Memory corruption
- CVSS 6.8 Medium
Possible out-of-bounds read leading to crash when decoding well-crafted EXIF metadata
- libvips
- Memory corruption
- CVSS 6.8 Medium
Possible integer overflow on 32-bit systems when reading GIF images
- libvips
- Memory corruption
- CVSS 7.0 High
Possible integer overflow leading to potential heap-based buffer overflow
- libvips
- Memory corruption
- CVSS 4.8 Medium
libvips nip2 vips7compat.c im_minpos_vec heap-based overflow
- libvips
- Memory corruption
- CVSS 4.8 Medium
libvips extract.c vips_extract_area_build integer overflow
- libvips
- Memory corruption
- CWE-189
- CVSS 4.8 Medium
libvips extract.c vips_extract_band_build out-of-bounds
- libvips
- Memory corruption
- CVSS 4.8 Medium
libvips unpremultiply.c vips_unpremultiply_build out-of-bounds
- libvips
- Memory corruption
- CVSS 4.8 Medium
libvips bandrank.c vips_bandrank_build heap-based overflow
- libvips
- Memory corruption
- CVSS 4.8 Medium
libvips csvload.c vips_foreign_load_csv_build heap-based overflow
- libvips
- Memory corruption
- CVSS 4.8 Medium
libvips matrixload.c vips_foreign_load_matrix_header null pointer dereference
- libvips
- Denial of service
- Memory corruption
- CVSS 4.8 Medium
libvips matrixload.c vips_foreign_load_matrix_header memory corruption
- libvips
- Memory corruption
- CVSS 2.0 Low
libvips source.c vips_source_read_to_memory heap-based overflow
- libvips
- Memory corruption
- CVSS 5.1 Medium
libvips is vulnerable to Buffer Over-Read in poppler-based pdfload
- libvips
- CWE-126
- CVSS 8.5 High
libvips has a potential heap-based buffer overflow when attempting to convert multiband TIFF input to HEIF output
- libvips
- Memory corruption
- CVSS 5.5 Medium
Potential segfault due to NULL pointer dereference in libvips
- libvips
- Memory corruption