CVE-2019-17534, CVE-2019-6976, CVE-2023-40032 +6 more CVEs: libvips before 8.17.2 (exclusive), < 8.17.2

CVE-2019-17534

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Network (remote) · No privileges required · User interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2019-6976

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.0 assessment rates confidentiality impact as low; integrity and availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2023-40032

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-59933

Affected technology

libvips · before 8.17.2 (exclusive)
libvips

libvips · < 8.17.2
libvips

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · No privileges required · No user interaction required

What an attacker can do

Vendor/CNA’s CVSS 4.0 assessment (base score 5.1/10) rates confidentiality, integrity and availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-2913

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 4.0): Local · Low privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 4.0 assessment rates confidentiality and integrity impact as none; availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-69242

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 4.0): Local · Low privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 4.0 assessment rates confidentiality impact as low; integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-70651

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 4.0): Local · Low privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 4.0 assessment rates confidentiality impact as none; integrity impact as low; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-70652

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 4.0): Local · Low privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 4.0 assessment rates confidentiality and availability impact as low; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-70654

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 4.0): Local · Low privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 4.0 assessment rates confidentiality impact as none; integrity impact as low; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.