MiracleLinux 8 : libtiff-4.0.9-39.el8_10 (AXSA:2026-1889:10)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1889:10 advisory. libtiff: libtiff: Arbitrary code execution via processcommandopts function CVE-2026-52490 Tenable has extracted the preceding description block directly from...

RockyLinux 8 : libtiff (RLSA-2026:69095)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:69095 advisory. libtiff: libtiff: Arbitrary code execution via processcommandopts function CVE-2026-52490 Tenable has extracted the preceding description block directly from the...

Amazon Linux 2023 : libtiff, libtiff-devel, libtiff-static (ALAS2023-2026-2156)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2156 advisory. An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the processcommandopts function in tools/tiffcrop.c CVE-2026-52490 Tenable has extracted th...

Important: libtiff

Issue Overview: An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the processcommandopts function in tools/tiffcrop.c CVE-2026-52490 Affected Packages: libtiff Issue Correction: Run dnf update libtiff --releasever 2023.12.20260914 or dnf...

ROOT-OS-DEBIAN-13-CVE-2026-52490 CVE-2026-52490 in tiff - Patched by Root

Root has patched CVE-2026-52490 in the tiff package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-52490 CVE-2026-52490 in tiff - Patched by Root

Root has patched CVE-2026-52490 in the tiff package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-52490 CVE-2026-52490 in tiff - Patched by Root

Root has patched CVE-2026-52490 in the tiff package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-52490

creationtimestamp| type| source ---|---|--- 2026-08-25 20:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtwne2r4gn2b 2026-08-27 06:50:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2azgiemb24...

CVE-2026-52490

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the processcommandopts function in tools/tiffcrop.c...

CVE-2026-52490

The libtiff library is vulnerable to arbitrary code execution due to an integer overflow in the tiffcrop subdivision calculation within the tools/tiffcrop.c file. Specifically, the flaw resides in the process_command_opts() function of version 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 . This issue...