Beveiligingsadvies

CVE-2026-35590

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-20 16:23:33
Laatst bijgewerkt 2026-07-20 19:03:42
Toegewezen door GitHub_M
CVSS-score 6.8
Status PUBLISHED

Beschrijving

libvips is a fast image processing library with low memory needs. The EXIF decoder within libvips versions before and including 8.18.1 was not verifying the range of EXIF tag groups before passing data to libexif, leading to a possible null pointer dereference and crash. This has been patched in version 8.18.2.