Known Vulnerabilities for products from Libvips
Listed below are 10 of the newest known vulnerabilities associated with the vendor "Libvips".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-35591 json | Not Provided | 2026-07-20 | 2026-07-20 | |
| CVE-2026-35590 json | Not Provided | 2026-07-20 | 2026-07-20 | |
| CVE-2026-33328 json | Not Provided | 2026-07-20 | 2026-07-20 | |
| CVE-2026-33327 json | Not Provided | 2026-07-20 | 2026-07-20 | |
| CVE-2026-3284 json | A vulnerability was found in libvips 8.19.0. Impacted is the function vips_extract_area_build of the file libvips/conversion/... | Not Provided | 2026-02-27 | 2026-04-29 |
| CVE-2026-3281 json | A vulnerability was detected in libvips 8.19.0. This affects the function vips_bandrank_build of the file libvips/conversion/... | Not Provided | 2026-02-27 | 2026-04-29 |
| CVE-2026-3147 json | A vulnerability was found in libvips up to 8.18.0. This affects the function vips_foreign_load_csv_build of the file libvips/... | Not Provided | 2026-02-25 | 2026-04-29 |
| CVE-2026-2913 json | A vulnerability was determined in libvips up to 8.19.0. The affected element is the function vips_source_read_to_memory of th... | Not Provided | 2026-02-22 | 2026-04-29 |
| CVE-2023-40032 json | libvips is a demand-driven, horizontally threaded image processing library. A specially crafted SVG input can cause libvips v... | 5.5 - MEDIUM | 2023-09-11 | 2024-01-29 |
| CVE-2021-27847 json | Division-By-Zero vulnerability in Libvips 8.10.5 in the function vips_eye_point, eye.c#L83, and function vips_mask_point, mas... | 6.5 - MEDIUM | 2021-07-15 | 2023-09-29 |
| CVE-2020-20739 json | im_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an uninitialized variable which may cause ... | 5.3 - MEDIUM | 2020-11-20 | 2023-11-07 |
| CVE-2019-17534 json | vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetIma... | 8.8 - HIGH | 2019-10-13 | 2023-09-29 |
| CVE-2019-6976 json | libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data b... | 5.3 - MEDIUM | 2019-01-26 | 2023-09-29 |
| CVE-2018-7998 json | In libvips before 8.6.3, a NULL function pointer dereference vulnerability was found in the vips_region_generate function in ... | 7.5 - HIGH | 2018-03-09 | 2023-09-29 |