CVE-2019-17534: Libvips

High severity, CVSS 8.8. EPSS: 2.1% chance of exploitation in the next 30 days.

vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free.

Affected products

• Libvips Libvips: before 8.8.2 (fixed in 8.8.2)

Published 2019-10-13. Last modified 2026-06-17.