CVE-2026-69242
Description
A flaw was found in libvips. A crafted many-band TIFF image, when processed by libvips, can bypass scanline validation and trigger an integer overflow. This overflow leads to a heap buffer overflow, allowing an attacker to access arbitrary memory locations with negative offsets. This can result in the disclosure of sensitive image data, corruption of other data, and likely application crashes. While not yet demonstrated, remote code execution cannot be ruled out.
Statement
This is an Important flaw in libvips, where a specially crafted TIFF image can trigger an integer overflow, leading to a heap buffer overflow. This could allow an attacker to achieve arbitrary memory access, potentially resulting in data disclosure, denial of service, or remote code execution. The vulnerability requires local access or user interaction to process the malicious file.
Understanding the Weakness (CWE)
Integrity
Technical Impact: Modify Memory; Execute Unauthorized Code or Commands
Write operations could cause memory corruption. In some cases, an adversary can modify control data such as return addresses in order to execute unexpected code.
Availability
Technical Impact: DoS: Crash, Exit, or Restart
Attempting to access out-of-range, invalid, or unauthorized memory could cause the product to crash.
Other
Technical Impact: Unexpected State
Subsequent write operations can produce undefined or unexpected results.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
