Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in libvips 8.19.0. This vulnerability affects the function vips_unpremultiply_build of the file libvips/conversion/unpremultiply.c. Executing a manipulation of the argument alpha_band can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been published and may be used. This patch is called 7215ead1e0cd7d3703cc4f5fca06d7d0f4c22b91. A patch should be applied to remediate this issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-3282 Out-of-Bounds Read Vulnerability in libvips 8.19.0 Local Exploitation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3282
Post summary
A brief disclosure of CVE-2026-3282, an out-of-bounds read vulnerability in libvips 8.19.0 that allows local exploitation.
CVE-2026-3282 A flaw has been found in libvips 8.19.0. This vulnerability affects the function vips_unpremultiply_build of the file libvips/conversion/unpremultiply.c. Executing a ma… https://www.cve.org/CVERecord?id=CVE-2026-3282
Post summary
A vulnerability has been identified in libvips 8.19.0 affecting the vips_unpremultiply_build function, with details on the specific file and function involved.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | libvips | libvips | 8.19.0 | - | - |