The tiffload operation in libvips versions before and including 8.18.1 could incorrectly determine the number of channels in a JPEG or… (CVE-2026-35591)
A vulnerability in the tiffload operation of libvips versions up to and including 8.18.1 could cause incorrect determination of the number of channels in JPEG or JPEG2000-encoded tiles within TIFF images. This flaw may lead to a buffer overflow. The issue has been fixed in libvips version 8.18.2.
AI Analysis
Technical Summary
The tiffload operation in libvips versions before and including 8.18.1 incorrectly determines the number of channels in JPEG or JPEG2000-encoded tiles within TIFF images. This miscalculation can result in a buffer overflow condition. The vulnerability is addressed by a patch in version 8.18.2.
Potential Impact
Successful exploitation of this vulnerability could lead to a buffer overflow, potentially allowing an attacker to execute arbitrary code or cause a denial of service. The CVSS 3.1 base score is 7.8, indicating a high impact on confidentiality, integrity, and availability. However, the attack vector requires local access with low privileges and no user interaction is needed.
Mitigation Recommendations
Upgrade libvips to version 8.18.2 or later, where this vulnerability has been patched. No other mitigations are specified. Patch status is confirmed by the vendor advisory indicating the fix in 8.18.2.
The tiffload operation in libvips versions before and including 8.18.1 could incorrectly determine the number of channels in a JPEG or… (CVE-2026-35591)
Description
A vulnerability in the tiffload operation of libvips versions up to and including 8.18.1 could cause incorrect determination of the number of channels in JPEG or JPEG2000-encoded tiles within TIFF images. This flaw may lead to a buffer overflow. The issue has been fixed in libvips version 8.18.2.
CVSS v3.1
Score 7.8high
Affected software
pkg:deb/ubuntu/vips?arch=source&distro=esm-apps/xenialpkg:deb/ubuntu/vips?arch=source&distro=esm-apps/bionicpkg:deb/ubuntu/vips?arch=source&distro=focalpkg:deb/ubuntu/vips?arch=source&distro=esm-apps/jammypkg:deb/ubuntu/vips?arch=source&distro=noblepkg:deb/ubuntu/vips?arch=source&distro=resoluteRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The tiffload operation in libvips versions before and including 8.18.1 incorrectly determines the number of channels in JPEG or JPEG2000-encoded tiles within TIFF images. This miscalculation can result in a buffer overflow condition. The vulnerability is addressed by a patch in version 8.18.2.
Potential Impact
Successful exploitation of this vulnerability could lead to a buffer overflow, potentially allowing an attacker to execute arbitrary code or cause a denial of service. The CVSS 3.1 base score is 7.8, indicating a high impact on confidentiality, integrity, and availability. However, the attack vector requires local access with low privileges and no user interaction is needed.
Mitigation Recommendations
Upgrade libvips to version 8.18.2 or later, where this vulnerability has been patched. No other mitigations are specified. Patch status is confirmed by the vendor advisory indicating the fix in 8.18.2.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- UBUNTU-CVE-2026-35591
- Osv Schema Version
- 1.7.0
- Aliases
- []
- Ecosystems
- ["Ubuntu:Pro:16.04:LTS","Ubuntu:Pro:18.04:LTS","Ubuntu:20.04:LTS","Ubuntu:Pro:22.04:LTS","Ubuntu:24.04:LTS","Ubuntu:26.04:LTS"]
- Database Specific Severity
- null
- Cvss Version
- 3.1
Threat ID: 6a885f2bacd9273b493f8272
Added to database: 08/21/2026, 14:22:35 UTC
Last enriched: 08/21/2026, 15:08:21 UTC
Last updated: 08/21/2026, 22:52:12 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.