Product
libvips
16 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2026-3284
CVE-2026-3283
CVE-2026-3282
CVE-2026-3281
CVE-2026-3147
CVE-2026-3146
CVE-2026-3145
CVE-2026-2913
CVE-2025-59933
CVE-2025-29769
CVE-2023-40032
CVE-2021-27847
CVE-2020-20739
CVE-2019-17534
CVE-2019-6976
CVE-2018-7998
all versions
A vulnerability was found in libvips 8.19.0. Impacted is the function vips_extract_area_build of the file libvips/conversion/extra
all versions
A vulnerability has been found in libvips 8.19.0. This issue affects the function vips_extract_band_build of the file libvips/conv
all versions
A flaw has been found in libvips 8.19.0. This vulnerability affects the function vips_unpremultiply_build of the file libvips/conv
all versions
A vulnerability was detected in libvips 8.19.0. This affects the function vips_bandrank_build of the file libvips/conversion/bandr
<= 8.18.0
A vulnerability was found in libvips up to 8.18.0. This affects the function vips_foreign_load_csv_build of the file libvips/forei
<= 8.18.0
A vulnerability has been found in libvips up to 8.18.0. The impacted element is the function vips_foreign_load_matrix_header of th
<= 8.18.0
A flaw has been found in libvips up to 8.18.0. The affected element is the function vips_foreign_load_matrix_file_is_a/vips_foreig
<= 8.19.0
A vulnerability was determined in libvips up to 8.19.0. The affected element is the function vips_source_read_to_memory of the fil
< 8.17.2
libvips is a demand-driven, horizontally threaded image processing library. For versions 8.17.1 and below, when libvips is compile
< 8.16.1
libvips is a demand-driven, horizontally threaded image processing library. The heifsave operation could incorrectly determine th
>= 8.12.0 and < 8.14.4
libvips is a demand-driven, horizontally threaded image processing library. A specially crafted SVG input can cause libvips versio
all versions
Division-By-Zero vulnerability in Libvips 8.10.5 in the function vips_eye_point, eye.c#L83, and function vips_mask_point, mask.c#L
< 8.8.2
im_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an uninitialized variable which may cause the l
< 8.8.2
vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDes
< 8.7.4
libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data becaus
< 8.6.3
In libvips before 8.6.3, a NULL function pointer dereference vulnerability was found in the vips_region_generate function in regio