CVE-2026-70651 | libvips up to 8.18.2 ImageMagick magick6load.c heap-based overflow

August 20, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in libvips up to 8.18.2. Affected by this vulnerability is an unknown functionality of the file libvips/foreign/magick6load.c of the component ImageMagick. This manipulation causes heap-based buffer overflow.

This vulnerability is tracked as CVE-2026-70651. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More