Vulnerabilities

libvips is a fast image processing library with low memory needs.

libvips is a fast image processing library with low memory needs. The EXIF decoder within libvips versions before and including 8.18.1 was not verifying the range of EXIF tag groups before passing data to libexif, leading to a possible null pointer dereference and crash. This has been patched in version 8.18.2.

Read at NIST National Vulnerability Database (CVE API 2.0)

Fix

available

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-35590 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 40
   Ubuntu notice Ubuntu 8h ago

   libvips vulnerabilities

   CVE-2025-59933CVE-2026-33327CVE-2026-33328+6 more Canonical
2. 5
   CVE NVD 20 Jul 2026

   libvips is a fast image processing library with low memory needs.

   Fix available CVE-2026-35591
3. 5
   CVE NVD 20 Jul 2026

   libvips is a fast image processing library with low memory needs.

   Fix available CVE-2026-33328
4. 5
   CVE NVD 20 Jul 2026

   libvips is a fast image processing library with low memory needs.

   Fix available CVE-2026-33327