<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: libvips</title><description>Every new CVE for libvips.</description><link>https://agentprime.io/</link><item><title>CVE-2026-70654: libvips: A well-crafted PPM image processed via a custom source could lead to possible heap buffer write overflow</title><link>https://agentprime.io/advisories/CVE-2026-70654/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-70654/</guid><description>CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Aug 2026 21:07:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-70653: libvips: Possible heap-based buffer read overflow when decoding a well-crafted RLE Radiance image</title><link>https://agentprime.io/advisories/CVE-2026-70653/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-70653/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Aug 2026 21:06:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-70651: libvips: Possible integer overflow when reading multi-page TIFF images via ImageMagick</title><link>https://agentprime.io/advisories/CVE-2026-70651/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-70651/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Aug 2026 21:05:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-70652: libvips: Possible heap-based buffer read overflow when resizing and re-encoding a JPEG with gain map</title><link>https://agentprime.io/advisories/CVE-2026-70652/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-70652/</guid><description>CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Aug 2026 21:04:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-69242: libvips: Integer overflow leading to heap buffer overflow leading to possible attacker-controlled mmap-resident write</title><link>https://agentprime.io/advisories/CVE-2026-69242/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-69242/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Aug 2026 21:02:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-35591: Possible heap-based buffer overflow when decoding TIFF image containing well-crafted tile</title><link>https://agentprime.io/advisories/CVE-2026-35591/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-35591/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 20 Jul 2026 16:24:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-35590: Possible out-of-bounds read leading to crash when decoding well-crafted EXIF metadata</title><link>https://agentprime.io/advisories/CVE-2026-35590/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-35590/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 20 Jul 2026 16:23:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33328: Possible integer overflow on 32-bit systems when reading GIF images</title><link>https://agentprime.io/advisories/CVE-2026-33328/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33328/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 20 Jul 2026 16:22:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33327: Possible integer overflow leading to potential heap-based buffer overflow</title><link>https://agentprime.io/advisories/CVE-2026-33327/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33327/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 20 Jul 2026 16:21:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-6491: libvips nip2 vips7compat.c im_minpos_vec heap-based overflow</title><link>https://agentprime.io/advisories/CVE-2026-6491/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-6491/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 17 Apr 2026 13:45:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-3284: libvips extract.c vips_extract_area_build integer overflow</title><link>https://agentprime.io/advisories/CVE-2026-3284/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3284/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Feb 2026 03:02:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-3283: libvips extract.c vips_extract_band_build out-of-bounds</title><link>https://agentprime.io/advisories/CVE-2026-3283/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3283/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Feb 2026 02:32:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-3282: libvips unpremultiply.c vips_unpremultiply_build out-of-bounds</title><link>https://agentprime.io/advisories/CVE-2026-3282/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3282/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Feb 2026 02:32:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-3281: libvips bandrank.c vips_bandrank_build heap-based overflow</title><link>https://agentprime.io/advisories/CVE-2026-3281/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3281/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Feb 2026 02:02:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-3147: libvips csvload.c vips_foreign_load_csv_build heap-based overflow</title><link>https://agentprime.io/advisories/CVE-2026-3147/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3147/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 25 Feb 2026 03:32:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-3146: libvips matrixload.c vips_foreign_load_matrix_header null pointer dereference</title><link>https://agentprime.io/advisories/CVE-2026-3146/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3146/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 25 Feb 2026 03:02:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-3145: libvips matrixload.c vips_foreign_load_matrix_header memory corruption</title><link>https://agentprime.io/advisories/CVE-2026-3145/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3145/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 25 Feb 2026 02:02:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-2913: libvips source.c vips_source_read_to_memory heap-based overflow</title><link>https://agentprime.io/advisories/CVE-2026-2913/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-2913/</guid><description>CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 22 Feb 2026 04:02:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-59933: libvips is vulnerable to Buffer Over-Read in poppler-based pdfload</title><link>https://agentprime.io/advisories/CVE-2025-59933/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-59933/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 29 Sep 2025 22:04:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-29769: libvips has a potential heap-based buffer overflow when attempting to convert multiband TIFF input to HEIF output</title><link>https://agentprime.io/advisories/CVE-2025-29769/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-29769/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 07 Apr 2025 20:09:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-40032: Potential segfault due to NULL pointer dereference in libvips</title><link>https://agentprime.io/advisories/CVE-2023-40032/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-40032/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 Sep 2023 18:34:59 GMT</pubDate><category>CVE</category></item></channel></rss>