A vulnerability classified as problematic was found in libvips 8.19.0. Impacted is the function
vips_extract_area_build of the file libvips/conversion/extract.c. The manipulation of the argument extract_area results in integer overflow.
This vulnerability is reported as CVE-2026-3284. The attack requires a local approach. Moreover, an exploit is present.
It is advisable to implement a patch to correct this issue.