Search: CVE-2026-70651

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.9	CVE-2026-70651vips · Prior to version 8.18.3, libvips built without libtiff support but with ImageMagick support can overflow the combined Medium6.92026-08-20GCVE DatabaseCVE-2026-70651 A vulnerability in libvips prior to version 8.18.3 affects builds without libtiff support but with ImageMagick support. It can cause a heap buffer over-read and process crash when loading crafted multi-page TIFF images via VipsForeignLoadMagick due to unchecked multiplication of per-page Ysize by the number of frames. Most package-manager builds include libtiff and are not affected. The issue is fixed in version 8.18.3. Report on CVE-2026-70651 Vulnerability	GCVE Database	2026-08-20

Page 1 of 1 · 1 duplicate CVE record merged