Memory Corruption in libvips via PFM Image Processing

Executive Summary

CVE-2026-88360 is a memory access vulnerability in libvips 8.19.0 affecting the handling of little-endian PFM images. When the PFM text header length is not a multiple of four bytes, the mmap-based loader exposes pixel data at an unaligned memory address. The vips_avg_scan() function then dereferences this misaligned float pointer, causing undefined behavior and process termination on strict-alignment architectures or UBSan-instrumented builds, leading to denial of service.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, inspect libvips versions for 8.19.0 or check for crashes when processing PFM images with non-4-byte-aligned headers. Monitor logs for SIGBUS errors on strict-alignment systems or UBSan aborts. Use tools like file or hexdump to verify PFM header lengths.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can cause applications using libvips to crash when processing specially crafted PFM images with misaligned headers. On strict-alignment systems like ARM32 or SPARC, it triggers a SIGBUS crash. On x86-64, it may cause crashes in sanitizer-enabled builds or UBSan aborts. The impact is denial of service from a single valid image file.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability primarily causes denial of service by crashing applications processing specific PFM images, which could disrupt data processing workflows. It does not directly lead to data breaches or unauthorized access, so its impact on GDPR or HIPAA compliance would be indirect through service disruption rather than data exposure.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade libvips to a patched version if available. Avoid processing untrusted PFM images with non-4-byte-aligned headers. Implement input validation to reject PFM files with headers not divisible by 4 bytes. Monitor for crashes or UBSan errors as indicators of exploitation.

Useful 0 Not Useful 0