Libvips · product
Libvips
25 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 25 is a mark on the map. Named now: 1 to 25, most at risk first.
- libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated me…
- vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free.
- im_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an uninitialized variable which may cause the leakage of remote server path or stack address.
- In libvips before 8.6.3, a NULL function pointer dereference vulnerability was found in the vips_region_generate function in region.c, which allows remote attackers to cause a den…
- Division-By-Zero vulnerability in Libvips 8.10.5 in the function vips_eye_point, eye.c#L83, and function vips_mask_point, mask.c#L85.
- libvips has a potential heap-based buffer overflow when attempting to convert multiband TIFF input to HEIF output
- libvips bandrank.c vips_bandrank_build heap-based overflow
- Potential segfault due to NULL pointer dereference in libvips
- libvips extract.c vips_extract_band_build out-of-bounds
- libvips unpremultiply.c vips_unpremultiply_build out-of-bounds
- libvips csvload.c vips_foreign_load_csv_build heap-based overflow
- libvips extract.c vips_extract_area_build integer overflow
- libvips matrixload.c vips_foreign_load_matrix_header memory corruption
- libvips source.c vips_source_read_to_memory heap-based overflow
- libvips matrixload.c vips_foreign_load_matrix_header null pointer dereference
- libvips: Integer overflow leading to heap buffer overflow leading to possible attacker-controlled mmap-resident write
- Possible heap-based buffer overflow when decoding TIFF image containing well-crafted tile
- libvips is vulnerable to Buffer Over-Read in poppler-based pdfload
- Possible integer overflow leading to potential heap-based buffer overflow
- Possible out-of-bounds read leading to crash when decoding well-crafted EXIF metadata
- Possible integer overflow on 32-bit systems when reading GIF images
- libvips: Possible heap-based buffer read overflow when resizing and re-encoding a JPEG with gain map
- libvips: Possible heap-based buffer read overflow when decoding a well-crafted RLE Radiance image
- libvips: Possible integer overflow when reading multi-page TIFF images via ImageMagick
- libvips: A well-crafted PPM image processed via a custom source could lead to possible heap buffer write overflow
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.