Skip to content
OpenAdvisories
High DSA-5915-1 1 CVE

vips - security update

Published May 3, 2025 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 12 vips 8.14.1-3+deb12u2

Vulnerabilities 1

  • High 8.5

    libvips has a potential heap-based buffer overflow when attempting to convert multiband TIFF input to HEIF output

    libvips is a demand-driven, horizontally threaded image processing library. The heifsave operation could incorrectly determine the presence of an alpha channel in an input when it was not possible to determine the colour interpretation, known internally withi…