Vulnerabilities

libvips is a fast image processing library with low memory needs.

libvips is a fast image processing library with low memory needs. The `tiffload` operation in libvips versions before and including 8.18.1 could incorrectly determine the number of channels in a JPEG or JPEG2000-encoded tile within a TIFF image, leading to a possible buffer overflow. This has been patched in version 8.18.2.

Read at NIST National Vulnerability Database (CVE API 2.0)

Fix

available

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-35591 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 40
   Ubuntu notice Ubuntu 8h ago

   libvips vulnerabilities

   CVE-2025-59933CVE-2026-33327CVE-2026-33328+6 more Canonical
2. 5
   CVE NVD 20 Jul 2026

   libvips is a fast image processing library with low memory needs.

   Fix available CVE-2026-35590
3. 5
   CVE NVD 20 Jul 2026

   libvips is a fast image processing library with low memory needs.

   Fix available CVE-2026-33328
4. 5
   CVE NVD 20 Jul 2026

   libvips is a fast image processing library with low memory needs.

   Fix available CVE-2026-33327