A heap‑based buffer overflow occurs in libvips’s tiffload path when reading JPEG or JPEG2000‑encoded tiles inside a TIFF image. The library miscalculates the buffer size needed for a tile, causing a write past the allocated area. This flaw is a low‑level memory corruption bug classified as CWE‑122, which can lead to program crashes, data corruption.

The flaw affects libvips image‑processing library versions up to and including 8.18.1. Any application that imports libvips and processes TIFF files via the tiffload function is at risk. Versions 8.18.2 and later include the patch that corrects the buffer‑size calculation and mitigate the vulnerability.

The CVSS score of 7 indicates high severity. The EPSS score is < 1%, signifying a very low yet non‑zero chance of exploitation. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires a malicious TIFF file that is fed to an application using libvips for image decoding. The attack vector is inferred as processing untrusted input locally or via the application, as the description does not state a remote channel of attack.