Description
Division-By-Zero vulnerability in Libvips 8.10.5 in the function vips_eye_point, eye.c#L83, and function vips_mask_point, mask.c#L85.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | vips | 8.8.3-1 | — |
| Debian 13 | vips | 8.8.3-1 | — |
| Debian 12 | vips | 8.8.3-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 22.04 LTS | vips | 8.12.1-1ubuntu0.1~esm1 | USN-6437-1 |
| Ubuntu Pro 18.04 LTS | vips | 8.4.5-1ubuntu0.1~esm1 | USN-6437-1 |
| Ubuntu Pro 16.04 LTS | vips | 8.2.2-1ubuntu0.1~esm1 | USN-6437-1 |
Advisories 1
- USN-6437-1 vips vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026