Skip to content
Heist/ feed
Back to feed
UnratedFix available

libvips v8.18.7

Type: patchSources: libvips

This release includes input validation and bounds-checking improvements in several image loaders and processing functions.

Products
libvips
Affected versions
Not specified
Fixed versions
v8.18.7
CVEs
Not specified
Confirmed fixed CVEs
Not specified
Updated in this feed
29 Oct 2026, 03:19 UTC · Revision 1

Source evidence

libvips v8.18.7

github-libvips-libvips · Original source

Published 26 Sept 2026, 16:49 UTC

This release includes input validation and bounds-checking improvements in several image loaders and processing functions.

tiffload: check for undersized jp2k tiles [Ada Logics] hough_line: improve bounds check [Ada Logics] pdfiumload: check for buffer too small [Ada Logics]

libvips

Fixed versions: v8.18.7

Complete source record
{
  "id": "96e3cab9319e190d8f123d2459ec716b37e2bdf5465457a6616ae51ae808d4b0",
  "url": "https://github.com/libvips/libvips/releases/tag/v8.18.7",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "libvips v8.18.7",
    "summary": "This release includes input validation and bounds-checking improvements in several image loaders and processing functions.",
    "evidence": "tiffload: check for undersized jp2k tiles [Ada Logics] hough_line: improve bounds check [Ada Logics] pdfiumload: check for buffer too small [Ada Logics]",
    "products": [
      {
        "name": {
          "value": "libvips",
          "evidence": "Release notes from libvips"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "v8.18.7",
            "evidence": "v8.18.7"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-libvips-libvips",
  "document_id": 21672,
  "published_at": "2026-09-26T16:49:18+00:00"
}