Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-4775

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

Timeline

  1. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  2. CVE published
  3. Record last updated

Affected versions

  • libtiff

    Version range not reported

  • libtiff

    Version range not reported

  • compat-libtiff3

    Version range not reported

  • libtiff

    Version range not reported

  • libtiff

    Version range not reported

  • compat-libtiff3

    Version range not reported

  • mingw-libtiff

    Version range not reported

  • libtiff

    Version range not reported

  • compat-libtiff3

    Version range not reported

  • libtiff

    Version range not reported

  • compat-libtiff3

    Version range not reported

  • libtiff

    Version range not reported

  • compat-libtiff3

    Version range not reported

  • libtiff

    Version range not reported

  • compat-libtiff3

    Version range not reported

  • libtiff

    Version range not reported

  • compat-libtiff3

    Version range not reported

  • libtiff

    Version range not reported

  • compat-libtiff3

    Version range not reported

  • libtiff

    Version range not reported

  • compat-libtiff3

    Version range not reported

  • libtiff

    Version range not reported

  • libtiff

    Version range not reported

  • libtiff

    Version range not reported

  • libtiff

    Version range not reported

  • libtiff

    Version range not reported

  • rhaiis/model-opt-cuda-rhel9

    Version range not reported

  • rhaiis/model-opt-cuda-rhel9

    Version range not reported

  • rhaiis/vllm-spyre-rhel9

    Version range not reported

  • rhaiis/vllm-rocm-rhel9

    Version range not reported

  • rhaiis/vllm-cuda-rhel9

    Version range not reported

  • libtiff-main

    Version range not reported

  • rhai/base-image-neuron-rhel9

    Version range not reported

  • libtiff

    Version range not reported

References 25

access.redhat.com