CVE-2026-4775
EUVD-2026-1490124.03.2026, 15:16
A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| libtiff | libtiff | - |
| redhat | hardened_images | - |
| debian | debian_linux | 11.0 |
| redhat | enterprise_linux | 6.0 |
| redhat | enterprise_linux | 7.0 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
| redhat | enterprise_linux | 10.0 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | 0:4.6.0-6.el10_1.3 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10 | 0:4.6.0-8.el10_2.1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | 0:4.6.0-6.el10_0.3 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support | 0:3.9.4-12.el7_9.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support | 0:4.0.3-35.el7_9.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8 | 0:4.0.9-37.el8_10 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8 | 0:3.9.4-15.el8_10 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8 | 0:4.0.9-4.el8_10 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | 0:4.0.9-18.el8_4.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | 0:3.9.4-13.el8_4.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | 0:4.0.9-18.el8_4.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | 0:3.9.4-13.el8_4.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | 0:4.0.9-21.el8_6.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | 0:3.9.4-13.el8_6.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service | 0:4.0.9-21.el8_6.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service | 0:3.9.4-13.el8_6.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | 0:4.0.9-21.el8_6.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | 0:3.9.4-13.el8_6.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | 0:4.0.9-29.el8_8.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | 0:3.9.4-13.el8_8.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | 0:4.0.9-29.el8_8.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | 0:3.9.4-13.el8_8.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:4.4.0-15.el9_7.3 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:4.4.0-18.el9_8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | 0:4.2.0-3.el9_0.3 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | 0:4.4.0-8.el9_2.5 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support | 0:4.4.0-12.el9_4.5 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | 0:4.4.0-13.el9_6.4 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat AI Inference Server 3.2 | 1780681984 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat AI Inference Server 3.3 | 1782352950 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat AI Inference Server 3.3 | 1782352919 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat AI Inference Server 3.3 | 1782353093 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat AI Inference Server 3.3 | 1782352847 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 4.7.1-2.2.hum1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 4.7.1-2.3.hum1 ≤ 𝑥 < * | ADP |
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| tiff |
| ||||||||||||||||
| qtwebengine-opensource-src |
| ||||||||||||||||
| texmaker |
| ||||||||||||||||
| gdal |
| ||||||||||||||||
| neuron |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libtiff-devel |
| ||||||||||||||||||||
| libtiff5 |
| ||||||||||||||||||||
| libtiff5-32bit |
| ||||||||||||||||||||
| libtiff6 |
| ||||||||||||||||||||
| libtiff6-32bit |
| ||||||||||||||||||||
| tiff |
|
Red Hat Enterprise Linux Releases
Red Hat Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libtiff |
| ||||||||||||||||
| libtiff-devel |
| ||||||||||||||||
| libtiff-tools |
| ||||||||||||||||
| mingw32-libtiff |
| ||||||||||||||||
| mingw32-libtiff-static |
| ||||||||||||||||
| mingw64-libtiff |
| ||||||||||||||||
| mingw64-libtiff-static |
|
Amazon Linux Releases
Amazon Package | |||||
|---|---|---|---|---|---|
| compat-libtiff3 |
| ||||
| compat-libtiff3-debuginfo |
| ||||
| libtiff |
| ||||
| libtiff-debuginfo |
| ||||
| libtiff-debugsource |
| ||||
| libtiff-devel |
| ||||
| libtiff-static |
| ||||
| libtiff-tools |
| ||||
| libtiff-tools-debuginfo |
|
References