Search: CVE-2026-69242

A vulnerability in libvips prior to version 8.18.3 allows crafted many-band TIFF images processed through VipsForeignLoadTiff to evade scanline validation, causing an integer overflow. This overflow leads to buffer-region calculations that can access attacker-controlled negative offsets in memory, potentially resulting in data disclosure, process crashes, and possibly remote code execution. The issue is fixed in version 8.18.3.