Skip to content
Noroxi

libvips records

20 published records for vendor libvips.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
95%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 20
  4. 21
  5. 23
  6. 25
  7. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

20 records
  • CVE-2019-17534
    36Monitor

    vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, le

    HighCVSS 8.8No exploitEPSS 2%

    libvips · libvipsOct 12, 2019

  • CVE-2025-29769
    34Monitor

    libvips has a potential heap-based buffer overflow when attempting to convert multiband TIFF input to HEIF output

    HighCVSS 8.5No exploitEPSS 0%

    libvips · libvipsApr 7, 2025

  • CVE-2018-7998
    31Monitor

    In libvips before 8.6.3, a NULL function pointer dereference vulnerability was found in the vips_region_generate function in region.c, which

    HighCVSS 7.5No exploitEPSS 2%

    libvips · libvipsMar 9, 2018

  • CVE-2026-35591
    28Monitor

    Possible heap-based buffer overflow when decoding TIFF image containing well-crafted tile

    HighCVSS 7.0No exploitEPSS 0%

    libvips · libvipsJul 20, 2026

  • CVE-2026-33327
    28Monitor

    Possible integer overflow leading to potential heap-based buffer overflow

    HighCVSS 7.0No exploitEPSS 0%

    libvips · libvipsJul 20, 2026

  • CVE-2026-35590
    27Monitor

    Possible out-of-bounds read leading to crash when decoding well-crafted EXIF metadata

    MediumCVSS 6.8No exploitEPSS 0%

    libvips · libvipsJul 20, 2026

  • CVE-2026-33328
    27Monitor

    Possible integer overflow on 32-bit systems when reading GIF images

    MediumCVSS 6.8No exploitEPSS 0%

    libvips · libvipsJul 20, 2026

  • CVE-2021-27847
    26Monitor

    Division-By-Zero vulnerability in Libvips 8.10.5 in the function vips_eye_point, eye.c#L83, and function vips_mask_point, mask.c#L85.

    MediumCVSS 6.5No exploitEPSS 1%

    libvips · libvipsJul 15, 2021

  • CVE-2019-6976
    22Monitor

    libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/

    MediumCVSS 5.3No exploitEPSS 2%

    libvips · libvipsJan 26, 2019

  • CVE-2020-20739
    22Monitor

    im_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an uninitialized variable which may cause the leakage of

    MediumCVSS 5.3No exploitEPSS 2%

    libvips · libvipsNov 20, 2020

  • CVE-2023-40032
    22Monitor

    Potential segfault due to NULL pointer dereference in libvips

    MediumCVSS 5.5No exploitEPSS 0%

    libvips · libvipsSep 11, 2023

  • CVE-2025-59933
    20Monitor

    libvips is vulnerable to Buffer Over-Read in poppler-based pdfload

    MediumCVSS 5.1No exploitEPSS 0%

    libvips · libvipsSep 29, 2025

  • CVE-2026-3145
    19Monitor

    libvips matrixload.c vips_foreign_load_matrix_header memory corruption

    MediumCVSS 4.8No exploitEPSS 0%

    libvips · libvipsFeb 24, 2026

  • CVE-2026-3146
    19Monitor

    libvips matrixload.c vips_foreign_load_matrix_header null pointer dereference

    MediumCVSS 4.8No exploitEPSS 0%

    libvips · libvipsFeb 24, 2026

  • CVE-2026-3147
    7Monitor

    libvips csvload.c vips_foreign_load_csv_build heap-based overflow

    LowCVSS 1.9No exploitEPSS 0%

    libvips · libvipsFeb 25, 2026

  • CVE-2026-3281
    7Monitor

    libvips bandrank.c vips_bandrank_build heap-based overflow

    LowCVSS 1.9No exploitEPSS 0%

    libvips · libvipsFeb 26, 2026

  • CVE-2026-3283
    7Monitor

    libvips extract.c vips_extract_band_build out-of-bounds

    LowCVSS 1.9No exploitEPSS 0%

    libvips · libvipsFeb 26, 2026

  • CVE-2026-3282
    7Monitor

    libvips unpremultiply.c vips_unpremultiply_build out-of-bounds

    LowCVSS 1.9No exploitEPSS 0%

    libvips · libvipsFeb 26, 2026

  • CVE-2026-3284
    7Monitor

    libvips extract.c vips_extract_area_build integer overflow

    LowCVSS 1.9No exploitEPSS 0%

    libvips · libvipsFeb 26, 2026

  • CVE-2026-2913
    4Monitor

    libvips source.c vips_source_read_to_memory heap-based overflow

    LowCVSS 1.1No exploitEPSS 0%

    libvips · libvipsFeb 22, 2026