Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was found in libvips 8.19.0. Impacted is the function vips_extract_area_build of the file libvips/conversion/extract.c. The manipulation of the argument extract_area results in integer overflow. The attack requires a local approach. The exploit has been made public and could be used. The patch is identified as 24795bb3d19d84f7b6f5ed86451ad556c8f2fe70. It is advisable to implement a patch to correct this issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-3284 A vulnerability was found in libvips 8.19.0. Impacted is the function vips_extract_area_build of the file libvips/conversion/extract.c. The manipulation of the argument… https://www.cve.org/CVERecord?id=CVE-2026-3284
Post summary
The post announces CVE-2026-3284 in libvips 8.19.0, noting the affected vips_extract_area_build function, but offers no exploit details, patch information, or evidence of active exploitation.
CVE-2026-3284 Integer Overflow Vulnerability in libvips 8.19.0 via vips_extract_area_build Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3284
Post summary
The entry announces CVE-2026-3284 as an integer overflow flaw in libvips 8.19.0’s vips_extract_area_build function, directing readers to a vulnerability details page for further information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | libvips | libvips | 8.19.0 | - | - |