CVE-2026-3283 | libvips 8.19.0 extract.c vips_extract_band_build extract_band out-of-bounds (Issue 4880)

A vulnerability classified as problematic has been found in libvips 8.19.0. This issue affects the function vips_extract_band_build of the file libvips/conversion/extract.c. The manipulation of the argument extract_band leads to out-of-bounds read.

This vulnerability is documented as CVE-2026-3283. The attack needs to be performed locally. Additionally, an exploit exists.

To fix this issue, it is recommended to deploy a patch.