CVE-2025-59933 | libvips up to 8.17.1 PDF vips_operation_block_set buffer over-read (GHSA-q8px-4w5q-c2r4)

September 30, 2025 Yanac

A vulnerability classified as critical has been found in libvips up to 8.17.1. This affects the function vips_operation_block_set of the component PDF Handler. The manipulation leads to buffer over-read.

This vulnerability is traded as CVE-2025-59933. An attack has to be approached locally. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More