CVE-2026-33327

Name of the Vulnerable Software and Affected Versions libvips versions prior to 8.18.1

Description The vipsload operation can incorrectly determine image dimensions, which leads to an integer overflow and a subsequent heap-based buffer overflow. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially leading to crashes or arbitrary code execution.

Recommendations Update to version 8.18.1.