libvips vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20252
3. 20269

Newest CVEs

• CVE-2026-70654

  libvips: A well-crafted PPM image processed via a custom source could lead to possible heap buffer write overflow

  libvips · libvips

  Medium5.8
• CVE-2026-70653

  libvips: Possible heap-based buffer read overflow when decoding a well-crafted RLE Radiance image

  libvips · libvips

  Medium4.8
• CVE-2026-70651

  libvips: Possible integer overflow when reading multi-page TIFF images via ImageMagick

  libvips · libvips

  Medium6.9
• CVE-2026-70652

  libvips: Possible heap-based buffer read overflow when resizing and re-encoding a JPEG with gain map

  libvips · libvips

  Low2.0
• CVE-2026-69242

  libvips: Integer overflow leading to heap buffer overflow leading to possible attacker-controlled mmap-resident write

  libvips · libvips

  High8.4
• CVE-2026-35591

  Possible heap-based buffer overflow when decoding TIFF image containing well-crafted tile

  libvips · libvips

  High7.0
• CVE-2026-35590

  Possible out-of-bounds read leading to crash when decoding well-crafted EXIF metadata

  libvips · libvips

  Medium6.8
• CVE-2026-33328

  Possible integer overflow on 32-bit systems when reading GIF images

  libvips · libvips

  Medium6.8
• CVE-2026-33327

  Possible integer overflow leading to potential heap-based buffer overflow

  libvips · libvips

  High7.0
• CVE-2025-59933

  libvips is vulnerable to Buffer Over-Read in poppler-based pdfload

  libvips · libvips

  Medium5.1