PT-2026-79141 · Libvips+1 · Libvips+1
CVE-2026-70651
·
Published
2026-08-20
·
Updated
2026-08-20
CVSS v4.0
6.9
Medium
| Vector | AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
libvips versions prior to 8.18.3
Description
An issue exists when the library is built without libtiff support but with ImageMagick support. Loading a crafted multi-page TIFF via the
VipsForeignLoadMagick function can lead to an overflow of the combined frame height. This occurs because calculations in libvips/foreign/magick6load.c and libvips/foreign/magick7load.c multiply the per-page Ysize by n frames without a checked bound, potentially resulting in a heap buffer over-read and a process crash.Recommendations
Update to version 8.18.3.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Imagemagick
Libvips