CVE-2025-29769

libvips is a demand-driven, horizontally threaded image processing library. The heifsave operation could incorrectly determine the presence of an alpha channel in an input when it was not possible to determine the colour interpretation, known internally within libvips as "multiband". There aren't many ways to create a "multiband" input, but it is possible with a well-crafted TIFF image. If a "multiband" TIFF input image had 4 channels and HEIF-based output was requested, this led to libvips creating a 3 channel HEIF image without an alpha channel but then attempting to write 4 channels of data. This caused a heap buffer overflow, which could crash the process. This vulnerability is fixed in 8.16.1.

• CWE-122

• https://github.com/libvips/libvips/commit/9ab6784f693de50b00fa535b9efbbe9d2cbf71f2Patch
• https://github.com/libvips/libvips/pull/4392Issue Tracking
• https://github.com/libvips/libvips/pull/4394Issue Tracking
• https://github.com/libvips/libvips/security/advisories/GHSA-f8r8-43hh-rghmPatch, Vendor Advisory
• https://issues.oss-fuzz.com/issues/396460413Exploit, Issue Tracking, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2025/04/msg00044.htmlMailing List, Third Party Advisory

Published

Apr 7, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-29756SunGrow's back end users system iSolarCloud https://isolarc…8.3
• CVE-2025-29757An incorrect authorisation check in the the 'plant transfer'…9.4
• CVE-2025-2976A vulnerability was found in GFI KerioConnect 10.0.6. It has…5.4
• CVE-2025-29763Rejected reason: “This CVE ID is Rejected and will not be us…
• CVE-2025-29766Tuleap is an Open Source Suite to improve management of soft…4.3
• CVE-2025-29768Vim, a text editor, is vulnerable to potential data loss wit…4.4
• CVE-2025-2977A vulnerability was found in GFI KerioConnect 10.0.6. It has…5.4
• CVE-2025-29770vLLM is a high-throughput and memory-efficient inference and…6.5
• CVE-2025-29771HtmlSanitizer is a client-side HTML Sanitizer. Versions prio…5.3
• CVE-2025-29772OpenEMR is a free and open source electronic health records …6.1
• CVE-2025-29773Froxlor is open-source server administration software. A vul…7.8
• CVE-2025-29774xml-crypto is an XML digital signature and encryption librar…9.3