https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 13 Nov 2026 03:08:39 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-88360 <p>libvips 8.19.0 contains a memory access vulnerability when processing little-endian PFM images. If the PFM text header length is not a multiple of four bytes, the mmap-based loader can expose pixel data at an address that is not properly aligned for float access. vips_avg_scan() subsequently dereferences the buffer through a float pointer, resulting in undefined behavior and process termination on strict-alignment architectures or UBSan-instrumented builds, leading to denial of service.</p> <p>libvips 8.19.0 contains a memory access vulnerability when processing little-endian PFM images. If the PFM text header length is not a multiple of four bytes, the mmap-based loader can expose pixel data at an address that is not properly aligned for float access. vips_avg_scan() subsequently dereferences the buffer through a float pointer, resulting in undefined behavior and process termination on strict-alignment architectures or UBSan-instrumented builds, leading to denial of service.</p> https://db.gcve.eu/vuln/fkie_cve-2026-88360 https://db.gcve.eu/vuln/ghsa-4f34-xv5x-8jfh <p>libvips 8.19.0 contains a memory access vulnerability when processing little-endian PFM images. If the PFM text header length is not a multiple of four bytes, the mmap-based loader can expose pixel data at an address that is not properly aligned for float access. vips_avg_scan() subsequently dereferences the buffer through a float pointer, resulting in undefined behavior and process termination on strict-alignment architectures or UBSan-instrumented builds, leading to denial of service.</p> <p>libvips 8.19.0 contains a memory access vulnerability when processing little-endian PFM images. If the PFM text header length is not a multiple of four bytes, the mmap-based loader can expose pixel data at an address that is not properly aligned for float access. vips_avg_scan() subsequently dereferences the buffer through a float pointer, resulting in undefined behavior and process termination on strict-alignment architectures or UBSan-instrumented builds, leading to denial of service.</p> https://db.gcve.eu/vuln/ghsa-4f34-xv5x-8jfh https://db.gcve.eu/vuln/ubuntu-cve-2026-88360 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: vips, Ubuntu:Pro:18.04:LTS: vips, Ubuntu:Pro:20.04:LTS: vips, Ubuntu:Pro:22.04:LTS: vips, Ubuntu:Pro:24.04:LTS: vips, Ubuntu:26.10: vips, Ubuntu:Pro:26.04:LTS: vips</p> <p>libvips 8.19.0 contains a memory access vulnerability when processing little-endian PFM images. If the PFM text header length is not a multiple of four bytes, the mmap-based loader can expose pixel data at an address that is not properly aligned for float access. vips_avg_scan() subsequently dereferences the buffer through a float pointer, resulting in undefined behavior and process termination on strict-alignment architectures or UBSan-instrumented builds, leading to denial of service.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: vips, Ubuntu:Pro:18.04:LTS: vips, Ubuntu:Pro:20.04:LTS: vips, Ubuntu:Pro:22.04:LTS: vips, Ubuntu:Pro:24.04:LTS: vips, Ubuntu:26.10: vips, Ubuntu:Pro:26.04:LTS: vips</p> <p>libvips 8.19.0 contains a memory access vulnerability when processing little-endian PFM images. If the PFM text header length is not a multiple of four bytes, the mmap-based loader can expose pixel data at an address that is not properly aligned for float access. vips_avg_scan() subsequently dereferences the buffer through a float pointer, resulting in undefined behavior and process termination on strict-alignment architectures or UBSan-instrumented builds, leading to denial of service.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-88360