Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security vulnerability has been detected in libvips up to 8.18.2. The affected element is the function im_minpos_vec of the file libvips/deprecated/vips7compat.c of the component nip2 Handler. Such manipulation of the argument n leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The vendor confirms that they will "be removing the deprecated area in libvips 8.19".
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-6491 A security vulnerability has been detected in libvips up to 8.18.2. The affected element is the function im_minpos_vec of the file libvips/deprecated/vips7compat.c of t… https://www.cve.org/CVERecord?id=CVE-2026-6491
Post summary
The text reports CVE‑2026‑6491 as a vulnerability in libvips up to version 8.18.2, identifies the affected function, but offers no further technical, PoC, exploitation, or patch information.
CVE-2026-6491 Heap-Based Buffer Overflow in libvips up to 8.18.2 nip2 Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6491
Post summary
The tweet provides a brief disclosure of CVE-2026-6491, noting a heap-based buffer overflow in libvips up to version 8.18.2, without mentioning PoC, exploits, patches, or active exploitation.