Vulnerability record · CVE-2026-3282 · published 27 February 2026

CVE-2026-3282: Libvips memory buffer overflow vulnerability

Libvips · Libvips

A flaw has been found in libvips 8.19.0. This vulnerability affects the function vips_unpremultiply_build of the file libvips/conversion/unpremultiply.c. Executing a manipulation of the argument alpha_band can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been published and may be used. This patch is called 7215ead1e0cd7d3703cc4f5fca06d7d0f4c22b91. A patch should be applied to remediate this issue.

1.9 CVSS 4.0 Low EPSS 0.20% · top 91.1% CWE-119 · Memory buffer overflowCWE-125 · Out-of-bounds read

1.9CVSS 4.0 base score, v2 1.7

0.20%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

8References, 2 tagged exploit

17 Jun 2026Last modified by NVD

Description

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Libvips Libvips

References

Link	Tags
https://github.com/libvips/libvips/	Product
https://github.com/libvips/libvips/commit/7215ead1e0cd7d3703cc4f5fca06d7d0f4c22b91	Patch
https://github.com/libvips/libvips/issues/4881	ExploitIssue TrackingVendor Advisory
https://github.com/libvips/libvips/issues/4881#issue-3944216443	ExploitIssue TrackingVendor Advisory
https://github.com/libvips/libvips/pull/4886	Issue TrackingPatch
https://vuldb.com/?ctiid.348011	Permissions RequiredVDB Entry
https://vuldb.com/?id.348011	Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.758862	Third Party AdvisoryVDB Entry

Track CVE-2026-3282 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2019-17534Libvips use after free vulnerabilityvips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to …EPSS 2.4%13 Oct 2019 8.5CVE-2025-29769Libvips heap-based buffer overflow vulnerabilitylibvips is a demand-driven, horizontally threaded image processing library. The heifsave operation could incorrectly determine the presence of an alp…EPSS 0.28%7 Apr 2025 7.5CVE-2018-7998Libvips race condition vulnerabilityIn libvips before 8.6.3, a NULL function pointer dereference vulnerability was found in the vips_region_generate function in region.c, which allows r…EPSS 1.8%9 Mar 2018 7.0CVE-2026-35591Libvips heap-based buffer overflow vulnerabilitylibvips is a fast image processing library with low memory needs. The `tiffload` operation in libvips versions before and including 8.18.1 could inco…EPSS 0.18%20 Jul 2026 7.0CVE-2026-33327Libvips integer overflow vulnerabilitylibvips is a fast image processing library with low memory needs. The `vipsload` operation in versions before and including 8.18.0 could incorrectly …EPSS 0.18%20 Jul 2026 6.8CVE-2026-35590Libvips heap-based buffer overflow vulnerabilitylibvips is a fast image processing library with low memory needs. The EXIF decoder within libvips versions before and including 8.18.1 was not verify…EPSS 0.15%20 Jul 2026 6.8CVE-2026-33328Libvips integer overflow vulnerabilitylibvips is a fast image processing library with low memory needs. On 32-bit systems in versions before and including 8.18.0, the `gifload` operation …EPSS 0.15%20 Jul 2026 6.5CVE-2021-27847Libvips divide by zero vulnerabilityDivision-By-Zero vulnerability in Libvips 8.10.5 in the function vips_eye_point, eye.c#L83, and function vips_mask_point, mask.c#L85.EPSS 0.98%15 Jul 2021

Source: NIST National Vulnerability Database (record CVE-2026-3282), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.