CVE-2026-6491: libvips nip2 vips7compat.c im_minpos_vec heap-based overflow
A security vulnerability has been detected in libvips up to 8.18.2. The affected element is the function imminposvec of the file libvips/deprecated/vips7compat.c of the component nip2 Handler. Such manipulation of the argument n leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The vendor confirms that they will "be removing the deprecated area in libvips 8.19".
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
libvips nip2 (vips7compat.c / im_minpos_vec)to a version that resolves this vulnerability.Fixed in 8.19 - Upgrade
Upgrade
libvips (deprecated area: vips7compat.c)to a version that resolves this vulnerability.Fixed in 8.19 - Compensating control
Approach/mitigate the attack locally (the vulnerability requires a local attack path per the report).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6491?
CVE-2026-6491 is classified as a high-severity vulnerability due to its potential to cause a heap-based overflow.
How do I fix CVE-2026-6491?
To fix CVE-2026-6491, update the libvips software to version 8.18.3 or later.
What versions of libvips are affected by CVE-2026-6491?
All versions of libvips up to and including 8.18.2 are affected by CVE-2026-6491.
What component of libvips is impacted by CVE-2026-6491?
CVE-2026-6491 impacts the nip2 Handler in the im_minpos_vec function within vips7compat.c.
What type of vulnerability is CVE-2026-6491 classified as?
CVE-2026-6491 is classified as a heap-based overflow vulnerability.