Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was detected in libvips 8.19.0. This affects the function vips_bandrank_build of the file libvips/conversion/bandrank.c. Performing a manipulation of the argument index results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit is now public and may be used. The patch is named fd28c5463697712cb0ab116a2c55e4f4d92c4088. It is suggested to install a patch to address this issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-3281 A vulnerability was detected in libvips 8.19.0. This affects the function vips_bandrank_build of the file libvips/conversion/bandrank.c. Performing a manipulation of th… https://www.cve.org/CVERecord?id=CVE-2026-3281
Post summary
CVE-2026-3281 has been identified in libvips 8.19.0, affecting the vips_bandrank_build function; no PoC, exploit, patch, or active exploitation details are provided.
CVE-2026-3281 Local Heap Buffer Overflow in libvips 8.19.0 via Argument Manipulation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3281
Post summary
The post announces CVE‑2026‑3281, detailing a local heap buffer overflow in libvips 8.19.0 triggered by argument manipulation, and links to the vulnerability details.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3281 - libvips bandrank.c vips_bandrank_build heap-based overflow Intel Report: https://ift.tt/1MUDIjC
Post summary
Intel reports a heap-based overflow in libvips's bandrank.c (CVE-2026-3281). No PoC, exploit, or patch details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | libvips | libvips | 8.19.0 | - | - |