CVE-2026-70653

Name of the Vulnerable Software and Affected Versions libvips versions prior to 8.18.3

Description The old-style Radiance RLE (Run-Length Encoding) decoder in libvips/foreign/radiance.c contains a flaw where it can process a repeat marker at the start of a scanline in the scanline read old() function. This allows the system to read q[-1] before any prior pixel exists. Consequently, a specially crafted Radiance image loaded through the VipsForeignLoadRad endpoint can disclose four bytes of adjacent heap data, which typically consists of other image data.

Recommendations Update to version 8.18.3.