CVE Browser

libvips: A well-crafted PPM image processed via a custom source could lead to possible heap buffer write overflow

libvips: Possible heap-based buffer read overflow when decoding a well-crafted RLE Radiance image

libvips: Possible integer overflow when reading multi-page TIFF images via ImageMagick

libvips: Possible heap-based buffer read overflow when resizing and re-encoding a JPEG with gain map

libvips: Integer overflow leading to heap buffer overflow leading to possible attacker-controlled mmap-resident write

Possible heap-based buffer overflow when decoding TIFF image containing well-crafted tile

Possible out-of-bounds read leading to crash when decoding well-crafted EXIF metadata

Possible integer overflow on 32-bit systems when reading GIF images

Possible integer overflow leading to potential heap-based buffer overflow

libvips nip2 vips7compat.c im_minpos_vec heap-based overflow

libvips extract.c vips_extract_area_build integer overflow

libvips extract.c vips_extract_band_build out-of-bounds

libvips unpremultiply.c vips_unpremultiply_build out-of-bounds

libvips bandrank.c vips_bandrank_build heap-based overflow

libvips csvload.c vips_foreign_load_csv_build heap-based overflow

libvips matrixload.c vips_foreign_load_matrix_header null pointer dereference

libvips matrixload.c vips_foreign_load_matrix_header memory corruption

libvips source.c vips_source_read_to_memory heap-based overflow

libvips is vulnerable to Buffer Over-Read in poppler-based pdfload

libvips has a potential heap-based buffer overflow when attempting to convert multiband TIFF input to HEIF output

Potential segfault due to NULL pointer dereference in libvips

Division-By-Zero vulnerability in Libvips 8.10.5 in the function vips_eye_point, eye.c#L83, and function vips_mask_point, mask.c#L85.

im_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an uninitialized variable which may cause the leakage of remote server path…

vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-afte…

libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not z…