01 Record

CVE-2026-70653

libvips: Possible heap-based buffer read overflow when decoding a well-crafted RLE Radiance image

MediumPUBLISHEDCNA: GitHub_M

Base score4.8 CVSS v4.0CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

02 Description

libvips: Possible heap-based buffer read overflow when decoding a well-crafted RLE Radiance image

Published

2026-08-20 21:06Z1 DAY AGO

Last updated

2026-08-21 15:37Z9 HR AGO

Reserved

2026-08-04

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

Medium (CVSS 4.8)

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Weaknesses

SSVC decision

ExploitationnoneAutomatablenoTechnical Impactpartial

Data version

5.2

Document digest

d9effa23ad8b3b6d3229901b8f4b15138699f9dad793fecbdea424edea1a39bf

VendorProductVersionsPlatforms

libvipslibvips< 8.18.3—