libvips kayıtları
libvips üreticisine ait 20 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %95
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer6
- CWE-122 Heap-based Buffer Overflow3
- CWE-190 Integer Overflow or Wraparound2
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1
- CWE-369 Divide By Zero1
- CWE-404 Improper Resource Shutdown or Release1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
20 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2019-17534İstismar yok | vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, lelibvips · libvips · CWE-416 | Yüksek8,8 | — | %2,4 | 12 Eki 2019 |
34İzleyin | CVE-2025-29769İstismar yok | libvips has a potential heap-based buffer overflow when attempting to convert multiband TIFF input to HEIF outputlibvips · libvips · CWE-122 | Yüksek8,5 | — | %0,3 | 7 Nis 2025 |
31İzleyin | CVE-2018-7998İstismar yok | In libvips before 8.6.3, a NULL function pointer dereference vulnerability was found in the vips_region_generate function in region.c, whichlibvips · libvips · CWE-362 | Yüksek7,5 | — | %1,8 | 9 Mar 2018 |
28İzleyin | CVE-2026-35591İstismar yok | Possible heap-based buffer overflow when decoding TIFF image containing well-crafted tilelibvips · libvips · CWE-122 | Yüksek7,0 | — | %0,2 | 20 Tem 2026 |
28İzleyin | CVE-2026-33327İstismar yok | Possible integer overflow leading to potential heap-based buffer overflowlibvips · libvips · CWE-190 | Yüksek7,0 | — | %0,2 | 20 Tem 2026 |
27İzleyin | CVE-2026-35590İstismar yok | Possible out-of-bounds read leading to crash when decoding well-crafted EXIF metadatalibvips · libvips · CWE-122 | Orta6,8 | — | %0,2 | 20 Tem 2026 |
27İzleyin | CVE-2026-33328İstismar yok | Possible integer overflow on 32-bit systems when reading GIF imageslibvips · libvips · CWE-190 | Orta6,8 | — | %0,2 | 20 Tem 2026 |
26İzleyin | CVE-2021-27847İstismar yok | Division-By-Zero vulnerability in Libvips 8.10.5 in the function vips_eye_point, eye.c#L83, and function vips_mask_point, mask.c#L85.libvips · libvips · CWE-369 | Orta6,5 | — | %1,0 | 15 Tem 2021 |
22İzleyin | CVE-2019-6976İstismar yok | libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/libvips · libvips · CWE-908 | Orta5,3 | — | %2,3 | 26 Oca 2019 |
22İzleyin | CVE-2020-20739İstismar yok | im_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an uninitialized variable which may cause the leakage of libvips · libvips · CWE-909 | Orta5,3 | — | %2,0 | 20 Kas 2020 |
22İzleyin | CVE-2023-40032İstismar yok | Potential segfault due to NULL pointer dereference in libvipslibvips · libvips · CWE-476 | Orta5,5 | — | %0,3 | 11 Eyl 2023 |
20İzleyin | CVE-2025-59933İstismar yok | libvips is vulnerable to Buffer Over-Read in poppler-based pdfloadlibvips · libvips · CWE-126 | Orta5,1 | — | %0,2 | 29 Eyl 2025 |
19İzleyin | CVE-2026-3145İstismar yok | libvips matrixload.c vips_foreign_load_matrix_header memory corruptionlibvips · libvips · CWE-119 | Orta4,8 | — | %0,2 | 24 Şub 2026 |
19İzleyin | CVE-2026-3146İstismar yok | libvips matrixload.c vips_foreign_load_matrix_header null pointer dereferencelibvips · libvips · CWE-404 | Orta4,8 | — | %0,2 | 24 Şub 2026 |
7İzleyin | CVE-2026-3147İstismar yok | libvips csvload.c vips_foreign_load_csv_build heap-based overflowlibvips · libvips · CWE-119 | Düşük1,9 | — | %0,2 | 25 Şub 2026 |
7İzleyin | CVE-2026-3281İstismar yok | libvips bandrank.c vips_bandrank_build heap-based overflowlibvips · libvips · CWE-119 | Düşük1,9 | — | %0,2 | 26 Şub 2026 |
7İzleyin | CVE-2026-3283İstismar yok | libvips extract.c vips_extract_band_build out-of-boundslibvips · libvips · CWE-119 | Düşük1,9 | — | %0,2 | 26 Şub 2026 |
7İzleyin | CVE-2026-3282İstismar yok | libvips unpremultiply.c vips_unpremultiply_build out-of-boundslibvips · libvips · CWE-119 | Düşük1,9 | — | %0,2 | 26 Şub 2026 |
7İzleyin | CVE-2026-3284İstismar yok | libvips extract.c vips_extract_area_build integer overflowlibvips · libvips · CWE-189 | Düşük1,9 | — | %0,2 | 26 Şub 2026 |
4İzleyin | CVE-2026-2913İstismar yok | libvips source.c vips_source_read_to_memory heap-based overflowlibvips · libvips · CWE-119 | Düşük1,1 | — | %0,2 | 22 Şub 2026 |
- CVE-2019-1753436İzleyin
vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, le
YüksekCVSS 8,8İstismar yokEPSS %2libvips · libvips12 Eki 2019
- CVE-2025-2976934İzleyin
libvips has a potential heap-based buffer overflow when attempting to convert multiband TIFF input to HEIF output
YüksekCVSS 8,5İstismar yokEPSS %0libvips · libvips7 Nis 2025
- CVE-2018-799831İzleyin
In libvips before 8.6.3, a NULL function pointer dereference vulnerability was found in the vips_region_generate function in region.c, which
YüksekCVSS 7,5İstismar yokEPSS %2libvips · libvips9 Mar 2018
- CVE-2026-3559128İzleyin
Possible heap-based buffer overflow when decoding TIFF image containing well-crafted tile
YüksekCVSS 7,0İstismar yokEPSS %0libvips · libvips20 Tem 2026
- CVE-2026-3332728İzleyin
Possible integer overflow leading to potential heap-based buffer overflow
YüksekCVSS 7,0İstismar yokEPSS %0libvips · libvips20 Tem 2026
- CVE-2026-3559027İzleyin
Possible out-of-bounds read leading to crash when decoding well-crafted EXIF metadata
OrtaCVSS 6,8İstismar yokEPSS %0libvips · libvips20 Tem 2026
- CVE-2026-3332827İzleyin
Possible integer overflow on 32-bit systems when reading GIF images
OrtaCVSS 6,8İstismar yokEPSS %0libvips · libvips20 Tem 2026
- CVE-2021-2784726İzleyin
Division-By-Zero vulnerability in Libvips 8.10.5 in the function vips_eye_point, eye.c#L83, and function vips_mask_point, mask.c#L85.
OrtaCVSS 6,5İstismar yokEPSS %1libvips · libvips15 Tem 2021
- CVE-2019-697622İzleyin
libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/
OrtaCVSS 5,3İstismar yokEPSS %2libvips · libvips26 Oca 2019
- CVE-2020-2073922İzleyin
im_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an uninitialized variable which may cause the leakage of
OrtaCVSS 5,3İstismar yokEPSS %2libvips · libvips20 Kas 2020
- CVE-2023-4003222İzleyin
Potential segfault due to NULL pointer dereference in libvips
OrtaCVSS 5,5İstismar yokEPSS %0libvips · libvips11 Eyl 2023
- CVE-2025-5993320İzleyin
libvips is vulnerable to Buffer Over-Read in poppler-based pdfload
OrtaCVSS 5,1İstismar yokEPSS %0libvips · libvips29 Eyl 2025
- CVE-2026-314519İzleyin
libvips matrixload.c vips_foreign_load_matrix_header memory corruption
OrtaCVSS 4,8İstismar yokEPSS %0libvips · libvips24 Şub 2026
- CVE-2026-314619İzleyin
libvips matrixload.c vips_foreign_load_matrix_header null pointer dereference
OrtaCVSS 4,8İstismar yokEPSS %0libvips · libvips24 Şub 2026
- CVE-2026-31477İzleyin
libvips csvload.c vips_foreign_load_csv_build heap-based overflow
DüşükCVSS 1,9İstismar yokEPSS %0libvips · libvips25 Şub 2026
- CVE-2026-32817İzleyin
libvips bandrank.c vips_bandrank_build heap-based overflow
DüşükCVSS 1,9İstismar yokEPSS %0libvips · libvips26 Şub 2026
- CVE-2026-32837İzleyin
libvips extract.c vips_extract_band_build out-of-bounds
DüşükCVSS 1,9İstismar yokEPSS %0libvips · libvips26 Şub 2026
- CVE-2026-32827İzleyin
libvips unpremultiply.c vips_unpremultiply_build out-of-bounds
DüşükCVSS 1,9İstismar yokEPSS %0libvips · libvips26 Şub 2026
- CVE-2026-32847İzleyin
libvips extract.c vips_extract_area_build integer overflow
DüşükCVSS 1,9İstismar yokEPSS %0libvips · libvips26 Şub 2026
- CVE-2026-29134İzleyin
libvips source.c vips_source_read_to_memory heap-based overflow
DüşükCVSS 1,1İstismar yokEPSS %0libvips · libvips22 Şub 2026