Description
vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | vips | 8.18.7-1.1 | openSUSE-SU-2026:12266-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | vips | 8.8.2-r0 | — |
| Alpine v3.23 | vips | 8.8.2-r0 | — |
| Alpine v3.22 | vips | 8.8.2-r0 | — |
| Alpine v3.21 | vips | 8.8.2-r0 | — |
| Alpine v3.20 | vips | 8.8.2-r0 | — |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | vips | 8.8.2-r0 | — |
| Alpine v3.18 | vips | 8.8.2-r0 | — |
| Alpine v3.17 | vips | 8.8.2-r0 | — |
| Alpine v3.16 | vips | 8.8.2-r0 | — |
| Alpine v3.15 | vips | 8.8.2-r0 | — |
Advisories 1
- openSUSE-SU-2026:12266-1 libvips-devel-8.18.7-1.1 on GA media SUSE / openSUSE Security Updates · Oct 25, 2026