Search: CVE-2026-70654

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.8	CVE-2026-70654vips · Prior to version 8.18.3, applications that define unusual custom libvips sources and use them to process untrusted Medium5.82026-08-20GCVE DatabaseCVE-2026-70654 A vulnerability in libvips prior to version 8.18.3 allows memory corruption or process crashes when processing untrusted uncompressed PPM images with unusual custom libvips sources. The flaw is due to an incorrect use of VIPS_MAX instead of VIPS_MIN in the function vips_source_read_to_memory, enabling up to 4032 bytes to be written beyond the allocated heap buffer. This issue is fixed in version 8.18.3. Report on CVE-2026-70654 Vulnerability	GCVE Database	2026-08-20

Page 1 of 1 · 1 duplicate CVE record merged