https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-35591.htmlhttps://patchthecve.com/cve/CVE-2026-35591.htmlWed, 19 Aug 2026 19:10:32 +0000HIGH 7.8: libvips is a fast image processing library with low memory needs. The `tiffload` operation in libvips versions before and including 8.18.1 could incorrectly determine the number of channels in a JPEG or JPEG2000-encoded tile within a TIFF image, leading to a possible buffer overflow. This has been phttps://patchthecve.com/cve/CVE-2026-35590.htmlhttps://patchthecve.com/cve/CVE-2026-35590.htmlWed, 19 Aug 2026 19:17:06 +0000MEDIUM 5.5: libvips is a fast image processing library with low memory needs. The EXIF decoder within libvips versions before and including 8.18.1 was not verifying the range of EXIF tag groups before passing data to libexif, leading to a possible null pointer dereference and crash. This has been patched in verhttps://patchthecve.com/cve/CVE-2026-33328.htmlhttps://patchthecve.com/cve/CVE-2026-33328.htmlWed, 19 Aug 2026 19:19:16 +0000MEDIUM 5.5: libvips is a fast image processing library with low memory needs. On 32-bit systems in versions before and including 8.18.0, the `gifload` operation could incorrectly determine dimensions leading to an integer overflow. This has been patched in version 8.18.1.https://patchthecve.com/cve/CVE-2026-33327.htmlhttps://patchthecve.com/cve/CVE-2026-33327.htmlWed, 19 Aug 2026 19:24:19 +0000HIGH 7.8: libvips is a fast image processing library with low memory needs. The `vipsload` operation in versions before and including 8.18.0 could incorrectly determine image dimensions leading to an integer overflow and a subsequent heap-based buffer overflow. This has been patched in version 8.18.1.