Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 2 total.
CVE-2026-33327
HIGH
CVSS 7.0
Verified Advisory
Jul 20, 2026
Integer overflow and heap buffer overflow in libvips vipsload operation (CVE-2026-33327)
The `vipsload` operation in libvips could incorrectly determine image dimensions, triggering an integer overflow that leads to a subsequent heap-based buffer overflow. An attacker able to supply a crafted image file m...
Fixed in >=8.18.1
Buffer Overflow
Integer Overflow
Libvips
CVE-2026-35591
HIGH
CVSS 7.0
Verified Advisory
Jul 20, 2026
Heap-based buffer overflow in libvips TIFF image decoding (CVE-2026-35591)
The `tiffload` operation in libvips could incorrectly determine the number of channels in a JPEG or JPEG2000-encoded tile within a TIFF image, leading to a possible heap-based buffer overflow. An attacker able to supp...
Fixed in >=8.18.2
Buffer Overflow
Heap Overflow
Libvips