libvips

Records25All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

libvips records in CISA KEV

No libvips vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Libvips 20 records MEDIUM

Records

20 records in Libvips · all components

TI-2026-02835 CVE-2026-3284 · GHSA-hjmm-353v-47h8

libvips extract.c vips_extract_area_build integer overflow

MEDIUM 55

A vulnerability was found in libvips 8.19.0.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00238 Published 2026-02-27 No fix listed CWE-189

TI-2026-02834 CVE-2026-3283 · GHSA-93j6-h3cr-cp28

libvips extract.c vips_extract_band_build out-of-bounds

MEDIUM 55

A vulnerability has been found in libvips 8.19.0.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00245 Published 2026-02-27 No fix listed CWE-119

TI-2026-02833 CVE-2026-3282 · GHSA-pg5c-mhhq-cqhh

libvips unpremultiply.c vips_unpremultiply_build out-of-bounds

MEDIUM 55

A flaw has been found in libvips 8.19.0.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00245 Published 2026-02-27 No fix listed CWE-119

TI-2026-02832 CVE-2026-3281 · GHSA-f98h-2fjh-775c

libvips bandrank.c vips_bandrank_build heap-based overflow

MEDIUM 55

A vulnerability was detected in libvips 8.19.0.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.0027 Published 2026-02-27 No fix listed CWE-119

TI-2026-02719 CVE-2026-3147 · GHSA-55xf-4pmg-v3xm

libvips csvload.c vips_foreign_load_csv_build heap-based overflow

MEDIUM 55

A vulnerability was found in libvips up to 8.18.0.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.0024 Published 2026-02-25 No fix listed CWE-119

TI-2026-02718 CVE-2026-3146 · GHSA-v5rp-3mcx-fr73

libvips matrixload.c vips_foreign_load_matrix_header null pointer dereference

MEDIUM 55

A vulnerability has been found in libvips up to 8.18.0.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00196 Published 2026-02-25 No fix listed CWE-404

TI-2026-02717 CVE-2026-3145 · GHSA-33r2-hfpx-fx7h

libvips matrixload.c vips_foreign_load_matrix_header memory corruption

MEDIUM 55

A flaw has been found in libvips up to 8.18.0.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00216 Published 2026-02-25 No fix listed CWE-119

TI-2026-02506 CVE-2026-2913 · GHSA-qjwf-h778-47mm

libvips source.c vips_source_read_to_memory heap-based overflow

MEDIUM 44

A vulnerability was determined in libvips up to 8.19.0.

CVSS 4.0LOW 2.0 Local Low privileges No interaction EPSS 0.00212 Published 2026-02-22 No fix listed CWE-119

TI-2019-13078 CVE-2019-17534 · GHSA-4hqm-7w7w-5w4r

vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to…

MEDIUM 42

vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02073 Published 2019-10-13 No fix listed CWE-416

TI-2025-21181 CVE-2025-29769

libvips has a potential heap-based buffer overflow when attempting to convert multiband TIFF input to HEIF output

LOW 39

libvips is a demand-driven, horizontally threaded image processing library.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00291 Published 2025-04-07 Fixed in 8.16.1 CWE-122

TI-2018-05775 CVE-2018-7998 · GHSA-qvpx-7hqq-8g4f

In libvips before 8.6.3, a NULL function pointer dereference vulnerability was found in…

LOW 36

In libvips before 8.6.3, a NULL function pointer dereference vulnerability was found in the vips_region_generate function in region.c, which allows remote attackers to cause a denial of service or possibly have unspecifi…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.01645 Published 2018-03-09 No fix listed CWE-362

TI-2026-25738 CVE-2026-33328

Possible integer overflow on 32-bit systems when reading GIF images

LOW 35

libvips is a fast image processing library with low memory needs.

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.00147 Published 2026-07-20 No fix listed CWE-190

TI-2026-25737 CVE-2026-33327

Possible integer overflow leading to potential heap-based buffer overflow

LOW 32

libvips is a fast image processing library with low memory needs.

CVSS 4.0HIGH 7.0 Local Low privileges No interaction EPSS 0.00158 Published 2026-07-20 No fix listed CWE-190

TI-2021-09207 CVE-2021-27847 · GHSA-78wm-7588-c232

Division-By-Zero vulnerability in Libvips 8.10.5 in the function vips_eye_point…

LOW 31

Division-By-Zero vulnerability in Libvips 8.10.5 in the function vips_eye_point, eye.c#L83, and function vips_mask_point, mask.c#L85.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00976 Published 2021-07-15 No fix listed CWE-369

TI-2026-27694 CVE-2026-35591

Possible heap-based buffer overflow when decoding TIFF image containing well-crafted tile

LOW 30

libvips is a fast image processing library with low memory needs.

CVSS 4.0HIGH 7.0 Local Low privileges No interaction EPSS 0.0019 Published 2026-07-20 No fix listed CWE-122

TI-2026-27693 CVE-2026-35590

Possible out-of-bounds read leading to crash when decoding well-crafted EXIF metadata

LOW 29

libvips is a fast image processing library with low memory needs.

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.00147 Published 2026-07-20 No fix listed CWE-122

TI-2020-13923 CVE-2020-20739 · GHSA-62hp-w5vm-g7xm

im_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an…

LOW 28

im_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an uninitialized variable which may cause the leakage of remote server path or stack address.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01815 Published 2020-11-20 No fix listed CWE-909

TI-2019-04912 CVE-2019-6976 · GHSA-589q-f3gp-p53f

libvips before 8.7.4 generates output images from uninitialized memory locations when…

LOW 28

libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02207 Published 2019-01-26 No fix listed CWE-908

TI-2023-20922 CVE-2023-40032

Potential segfault due to NULL pointer dereference in libvips

LOW 24

libvips is a demand-driven, horizontally threaded image processing library.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00252 Published 2023-09-11 Fixed in 8.14.4 CWE-476

TI-2025-37321 CVE-2025-59933

libvips is vulnerable to Buffer Over-Read in poppler-based pdfload

LOW 22

libvips is a demand-driven, horizontally threaded image processing library.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.00189 Published 2025-09-29 Fixed in 8.17.2 CWE-126

Open these records in search →

Critical	0
High	6
Medium	17
Low	2
No CVSS	0