A vulnerability has been found in libvips 8.19.0. This issue affects the function vips_extract_band_build of the file libvips/conversion/extract.c. The manipulation of the argument extract_band leads to out-of-bounds read. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 24795bb3d19d84f7b6f5ed86451ad556c8f2fe70. To fix this issue, it is recommended to deploy a patch.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b9f00ad1b7 advisory.

    - update to v8.18.3
    - enable uhdr
    - fix several security issues

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3b2ddea116 advisory.

    - update to v8.18.3
    - enable uhdr
    - fix several security issues

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability has been found in libvips 8.19.0. This issue affects the function vips_extract_band_build     of the file libvips/conversion/extract.c. The manipulation of the argument extract_band leads to out-of-     bounds read. The attack needs to be performed locally. The exploit has been disclosed to the public and     may be used. The identifier of the patch is 24795bb3d19d84f7b6f5ed86451ad556c8f2fe70. To fix this issue,     it is recommended to deploy a patch. (CVE-2026-3283)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
322123	Fedora 44 : vips (2026-b9f00ad1b7)	Nessus	Fedora Local Security Checks	medium
322118	Fedora 43 : vips (2026-3b2ddea116)	Nessus	Fedora Local Security Checks	medium
300277	Linux Distros Unpatched Vulnerability : CVE-2026-3283	Nessus	Misc.	medium

Detections

Analytics

CVE-2026-3283

medium

Tenable Plugins

medium

medium

medium