Skip to content
OpenAdvisories
High DLA-4148-1 1 CVE

vips - security update

Published Apr 30, 2025 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 11 vips 8.10.5-2+deb11u1

Vulnerabilities 1

  • High 8.5

    libvips has a potential heap-based buffer overflow when attempting to convert multiband TIFF input to HEIF output

    libvips is a demand-driven, horizontally threaded image processing library. The heifsave operation could incorrectly determine the presence of an alpha channel in an input when it was not possible to determine the colour interpretation, known internally withi…