CVE-2026-70654 | libvips up to 8.18.2 PPM Image libvips/iofuncs/source.c vips_source_read_to_memory buffer overflow

A vulnerability categorized as critical has been discovered in libvips up to 8.18.2. The impacted element is the function vips_source_read_to_memory of the file libvips/iofuncs/source.c of the component PPM Image Handler. Such manipulation leads to buffer overflow.

This vulnerability is traded as CVE-2026-70654. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More