CVE-2026-6491

MEDIUM

libvips nip2 vips7compat.c im_minpos_vec heap-based overflow

Title source: cna
STIX 2.1

Description

A security vulnerability has been detected in libvips up to 8.18.2. The affected element is the function im_minpos_vec of the file libvips/deprecated/vips7compat.c of the component nip2 Handler. Such manipulation of the argument n leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The vendor confirms that they will "be removing the deprecated area in libvips 8.19".

References (7)

Core 7
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-358035 | libvips nip2 vips7compat.c im_minpos_vec heap-based overflow
https://vuldb.com/vuln/358035
Signature, Permissions Required signature permissions-required
VDB-358035 | CTI Indicators (IOB, IOC, IOA)
https://vuldb.com/vuln/358035/cti
Third Party Advisory third-party-advisory
Submit #786994 | libvips 8.19.0 Out-of-Bounds Read
https://vuldb.com/submit/786994
Issue Tracking issue-tracking
https://github.com/libvips/libvips/issues/4965

Scores

CVSS v3 5.3
EPSS 0.0016
EPSS Percentile 5.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-119 CWE-122
Status published
Products (3)
None/libvips 8.18.0
None/libvips 8.18.1
None/libvips 8.18.2
Published Apr 17, 2026
Tracked Since Apr 17, 2026