PT-2025-15290 · Libvips+2 · Libvips+2

Published 2025-04-07 · Updated 2025-10-14 · CVE-2025-29769

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions libvips versions prior to 8.16.1

Description The issue arises from the heifsave operation in libvips, which can incorrectly determine the presence of an alpha channel in a "multiband" input. This can occur with a well-crafted TIFF image, leading to a heap buffer overflow when attempting to write 4 channels of data to a 3-channel HEIF image. This can cause the process to crash.

Recommendations For versions prior to 8.16.1, update to version 8.16.1 to resolve the issue. As a temporary workaround, consider avoiding the use of the heifsave operation with "multiband" TIFF input images until the update is applied.

Exploit

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

BDU:2025-13158

CVE-2025-29769

DLA-4148-1

DSA-5915-1

GHSA-F8R8-43HH-RGHM

Affected Products

Debian

Red Os

Libvips

References · 27

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/29xxx/CVE-2025-29769.json · Exploit
• 🔥 https://issues.oss-fuzz.com/issues/396460413 · Exploit
• https://github.com/libvips/libvips/security/advisories/GHSA-f8r8-43hh-rghm · Vendor Advisory
• https://github.com/libvips/libvips/commit/9ab6784f693de50b00fa535b9efbbe9d2cbf71f2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-29769 · Security Note
• https://osv.dev/vulnerability/DLA-4148-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-29769 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5915-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-29769 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-13158 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-29769 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-29769 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-29769 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-29769 · Security Note
• https://github.com/libvips/libvips/pull/4394 · Note