Beveiligingsadvies

CVE-2026-35591

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-20 16:24:50
Laatst bijgewerkt 2026-07-20 17:44:01
Toegewezen door GitHub_M
CVSS-score 7.0
Status PUBLISHED

Beschrijving

libvips is a fast image processing library with low memory needs. The `tiffload` operation in libvips versions before and including 8.18.1 could incorrectly determine the number of channels in a JPEG or JPEG2000-encoded tile within a TIFF image, leading to a possible buffer overflow. This has been patched in version 8.18.2.