Security Advisory

CVE-2026-35591

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-20 16:24:50

Last updated 2026-07-20 17:44:01

Assigner GitHub_M

CVSS score 7.0

State PUBLISHED

Description

libvips is a fast image processing library with low memory needs. The `tiffload` operation in libvips versions before and including 8.18.1 could incorrectly determine the number of channels in a JPEG or JPEG2000-encoded tile within a TIFF image, leading to a possible buffer overflow. This has been patched in version 8.18.2.

← Browse all CVEs View on cve.org ↗