PT-2026-79144 · Libvips · Libvips
CVE-2026-70654
·
Published
2026-08-20
·
Updated
2026-08-21
CVSS v4.0
5.8
Medium
| Vector | AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
libvips versions prior to 8.18.3
Description
Applications that define unusual custom sources and process untrusted uncompressed PPM images can trigger a max/min error in the
vips source read to memory() function within libvips/iofuncs/source.c. The function incorrectly uses VIPS MAX instead of VIPS MIN when selecting the remaining read size, which allows up to 4032 bytes to be written beyond the allocated heap buffer, leading to memory corruption or a process crash.Recommendations
Update to version 8.18.3.
Exploit
Fix
Heap Based Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Libvips