CVE-2026-4775
EUVD-2026-1490124.03.2026, 15:16
A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| libtiff | libtiff | - |
| redhat | hardened_images | - |
| debian | debian_linux | 11.0 |
| redhat | enterprise_linux | 6.0 |
| redhat | enterprise_linux | 7.0 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
| redhat | enterprise_linux | 10.0 |
𝑥
= Vulnerable software versions
Debian Releases
Red Hat Enterprise Linux Releases
Red Hat Product | |||||
|---|---|---|---|---|---|
| libtiff |
| ||||
| libtiff-devel |
| ||||
| libtiff-tools |
| ||||
| mingw32-libtiff |
| ||||
| mingw32-libtiff-static |
| ||||
| mingw64-libtiff |
| ||||
| mingw64-libtiff-static |
|
Vulnerability Media Exposure
References