It was discovered that libvips incorrectly handled certain PDF files with apage that defines a width but not a height. An attacker could possibly usethis issue to cause libvips to crash, resulting in a denial of service, orobtain sensitive information. This issue only affected Ubuntu 16.04 LTS,Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS.(CVE-2025-59933)It was discovered that libvips incorrectly determined image dimensions inthe vipsload operation, leading to an integer overflow. An attacker couldpossibly use this issue to cause libvips to crash, resulting in a denial ofservice, or possibly execute arbitrary code. (CVE-2026-33327)It was discovered that libvips incorrectly determined image dimensions inthe gifload operation on 32-bit systems, leading to an integer overflow. Anattacker could possibly use this issue to cause libvips to crash, resultingin a denial of service. This issue only affected Ubuntu 24.04 LTS andUbuntu 26.04 LTS. (CVE-2026-33328)It was discovered that libvips did not properly validate EXIF tag groups.An attacker could possibly use this issue to cause libvips to crash,resulting in a denial of service. (CVE-2026-35590)It was discovered that libvips incorrectly determined the number ofchannels in certain encoded tiles within TIFF images. An attacker couldpossibly use this issue to cause libvips to crash, resulting in a denial ofservice, or possibly execute arbitrary code. This issue only affectedUbuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-35591)It was discovered that libvips incorrectly validated scanlines in certainTIFF images with many bands, leading to an integer overflow. An attackercould possibly use this issue to cause libvips to crash, resulting in adenial of service, obtain sensitive information, or possibly executearbitrary code. (CVE-2026-69242)It was discovered that libvips incorrectly calculated frame heights whenloading certain multi-page TIFF images through ImageMagick. An attackercould possibly use this issue to cause libvips to crash, resulting in adenial of service. (CVE-2026-70651)It was discovered that libvips incorrectly handled certain Radiance images.An attacker could possibly use this issue to obtain sensitive information.(CVE-2026-70653)It was discovered that libvips incorrectly calculated read sizes whenprocessing certain uncompressed PPM images from custom sources. An attackercould possibly use this issue to cause libvips to crash, resulting in adenial of service, or possibly execute arbitrary code. This issue onlyaffected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu26.04 LTS. (CVE-2026-70654)