RHEL 9 : libtiff (RHSA-2026:58554)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58554 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Heap-bas...

EUVD-2026-65145

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...

RHEL 8 : libtiff (RHSA-2026:58553)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58553 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Heap-bas...

CVE-2026-52492

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...

CVE-2026-52492

CVE-2026-52492 affects the libtiff rgb2ycbcr utility. An integer overflow in the cvtRaster() function when computing strip buffer sizes leads to an undersized heap allocation, which can cause a heap-based buffer overflow during YCbCr conversion of a crafted TIFF image, potentially enabling arbitr...

K000163013: LibTIFF vulnerabilities CVE-2018-17000, CVE-2018-19210, CVE-2019-7663, CVE-2020-19131, and CVE-2020-19144

Security Advisory Description CVE-2018-17000 A NULL pointer dereference in the function TIFFmemcmp at tifunix.c called from TIFFWriteDirectoryTagTransferfunction in LibTIFF 4.0.9 allows an attacker to cause a denial-of-service through a crafted tiff file. This vulnerability can be triggered by th...

CVE-2026-70651

In libvips versions before 8.18.3, the ImageMagick fallback path in magick6load.c and magick7load.c multiplies per-page Ysize by n_frames without bounds checking, causing a heap buffer over-read and crash when loading a crafted multi-page TIFF. CVSS 6.9 (medium), local attack vector. Fixed in 8.1...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: compat-libtiff3 (UTSA-2026-101079)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101079 advisory. A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs wh...

DEBIAN-CVE-2026-74407

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cancel SSR work items during PCI shutdown A reboot can crash the kernel if it overlaps with WLAN firmware crash recovery SSR. The crash is a NULL pointer dereference in the MHI teardown path while freeing DMA-backed...

libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT8BITABGR output format and a specific stride value, leading to a heap-base...

libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT8BITABGR output format and a specific stride value, leading to a heap-base...

libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT8BITABGR output format and a specific stride value, leading to a heap-base...

RHEL 8 : compat-libtiff3 (RHSA-2026:54640)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:54640 advisory. The libtiff3 package provides libtiff 3, an older version of libtiff library for manipulating TIFF Tagged Image File Format image format files. This...

MiracleLinux 9 : libtiff-4.4.0-18.el9_8.1 (AXSA:2026-1530:09)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1530:09 advisory. libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image CVE-2026-12912 Tenable has extracted the preceding description block...

Photon OS 5.0: Libtiff PHSA-2026-5.0-92-0936

An update of the libtiff package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0936. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

libtiff: libtiff: Arbitrary code execution via crafted TIFF image

A flaw was found in libtiff. An integer overflow vulnerability exists in the cvtRaster function of the rgb2ycbcr utility. When processing a specially crafted TIFF image during YCbCr conversion, an attacker could trigger an undersized heap allocation, leading to a heap-based buffer overflow. This...

libtiff: libtiff: heap-buffer overflow via numeric truncation in the JPEG raw passthrough

A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the tiff2pdf utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit StripByteCounts value to be truncated to a 32-bit...

libtiff: libtiff: Arbitrary code execution via thumbnail.c: main() component

A flaw was found in libtiff. An attacker could exploit this vulnerability by processing a specially crafted file, leading to arbitrary code execution. This issue occurs within the thumbnail.c: main component. Successful exploitation could allow the attacker to take control of the affected system...

libtiff: libtiff: Arbitrary code execution via process_command_opts() function

A flaw was found in libtiff. An attacker can exploit a vulnerability in the processcommandopts function within tools/tiffcrop.c to execute arbitrary code. This could lead to a complete compromise of the affected system...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libtiff: libtiff-4.7.2-2.hum1 aarch64, x8664 libtiff-devel-4.7.2-2.hum1 aarch64, x8664 libtiff-static-4.7.2-2.hum1 aarch64, x8664 libtiff-tools-4.7.2-2.hum1 aarch64, x8664 libtiff-4.7.2-2.hum1.sr...