https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T21:03:38.764387+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-70653 CVE-2026-70653 — libvips: Possible heap-based buffer read overflow when decoding a well-crafted RLE Radiance image 2026-10-05T21:03:38.780045+00:00

Affected: libvips

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, the old-style Radiance RLE decoder in libvips/foreign/radiance.c can process a repeat marker at the beginning of a scanline in scanline_read_old and read q[-1] before any prior pixel exists. A crafted Radiance image loaded through VipsForeignLoadRad can therefore disclose four bytes of adjacent heap data, most likely other image data. This issue is fixed in version 8.18.3.