CVE-2026-70654
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
27/100
Published: 2026-08-20
Modified: 2026-10-26
First seen: 2026-10-29
Status: active
Attack Surface
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
High
PR:
Low
UI:
None
S:
X
AT:
Present
VC:
None
VI:
Low
VA:
High
Description
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, applications that define unusual custom libvips sources and use them to process untrusted uncompressed PPM images can trigger a max/min error in vips_source_read_to_memory in libvips/iofuncs/source.c. The function uses VIPS_MAX instead of VIPS_MIN when selecting the remaining read size, allowing up to 4032 bytes to be written beyond the allocated heap buffer and causing memory corruption or a process crash. This issue is fixed in version 8.18.3.