Search: CVE-2026-35590

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.5	EPSS 0.1%	CVE-2026-35590vips · The EXIF decoder within libvips versions before and including 8.18.1 was not verifying the range of EXIF tag groups Medium5.5EPSS 0.1%2026-07-20GCVE DatabaseCVE-2026-35590 A vulnerability in the EXIF decoder of libvips versions up to and including 8.18.1 allows a crafted EXIF tag group to cause a null pointer dereference, leading to a crash. This issue has been fixed in version 8.18.2. EPSS 0.1%Vulnerability	GCVE Database	2026-07-20

Page 1 of 1