NVD Vulnerability Detail
Search Exploit, PoC
CVE-2026-35591
Summary

libvips is a fast image processing library with low memory needs. The `tiffload` operation in libvips versions before and including 8.18.1 could incorrectly determine the number of channels in a JPEG or JPEG2000-encoded tile within a TIFF image, leading to a possible buffer overflow. This has been patched in version 8.18.2.

Publication Date July 21, 2026, 2:17 a.m.
Registration Date July 21, 2026, 4:30 a.m.
Last Update July 21, 2026, 3:16 a.m.
Related information, measures and tools
Common Vulnerabilities List