Multiple security vulnerabilities have been identified in libvips, an image processing library. The flaws affect parsing of PDF, GIF, TIFF, Radiance, and PPM image data and can lead to denial of service, information disclosure, or arbitrary code execution. The affected releases include 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, 24.04 LTS, and 26.04 LTS, with some issues limited to specific releases.
CVE-2025-59933: libvips incorrectly handled certain PDF files with a page that defines a width but not a height. An attacker could supply such a PDF to cause a crash, resulting in denial of service, or obtain sensitive information on 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS.[/subscribe_to_unlock_form]
Multiple security vulnerabilities have been identified in libvips, an image processing library. The flaws affect parsing of PDF, GIF, TIFF, Radiance, and PPM image data and can lead to denial of service, information disclosure, or arbitrary code execution. The affected releases include 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, 24.04 LTS, and 26.04 LTS, with some issues limited to specific releases.
CVE-2025-59933: libvips incorrectly handled certain PDF files with a page that defines a width but not a height. An attacker could supply such a PDF to cause a crash, resulting in denial of service, or obtain sensitive information on 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS.[emaillocker id="1283"]
CVE-2026-33327: libvips incorrectly determined image dimensions during an image loading operation, leading to an integer overflow. An attacker could supply crafted image data to cause a crash, resulting in denial of service, or possibly execute arbitrary code.
These vulnerabilities collectively present a significant risk to systems that process untrusted image files, especially deployments relying on the affected image processing library. The most at-risk environments are those that accept image data from untrusted sources, and the general action is to apply the available security update for the affected library.
The following reports contain further technical details:
[/emaillocker]