Integer overflow and heap buffer overflow in libvips vipsload operation (CVE-2026-33327)

The `vipsload` operation in libvips could incorrectly determine image dimensions, triggering an integer overflow that leads to a subsequent heap-based buffer overflow. An attacker able to supply a crafted image file may exploit this to corrupt memory, potentially affecting data integrity and availability. Affected versions: - <=8.18.0 We recommend updating to: >=8.18.1. CVSS 7.0 · our assessment: this_week Reference: https://github.com/libvips/libvips/security/advisories/GHSA-2fcj-gj27-279x Details: https://vuln.today/cve/CVE-2026-33327