PT-2026-106827

Name of the Vulnerable Software and Affected Versions ImageSharp versions 2.0.0 through 4.1.1 Description The TIFF CCITT Group 3 encoder allocates an undersized compressed-data buffer for narrow 1-bit images. The TiffCcittCompressor.Initialize function fails to reserve sufficient space for row da...

CVE-2026-106113: Out-of-bounds Write

ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, decoding an attacker-supplied 32-bit floating-point TIFF as Image and applying HistogramEqualization can produce a non-finite or out-of-range luminance in ColorNumerics.GetBT709Luminance. GrayscaleLevelsRowOperation.Invoke uses the...

PT-2026-106839

Name of the Vulnerable Software and Affected Versions ImageSharp versions 3.0.0 through 4.1.0 Description In the tiled TIFF decoding process, a destination buffer is allocated using TileWidth, but the TiffDecompressorsFactory.Create function constructs T4, T6, and Modified Huffman decompressors...

Astra Linux – Vulnerability in TIF format

The loadImage function in tools/tiffcrop.c within LibTIFF, as of version 4.5.0, involves a heap-based use after deallocation, involving a crafted TIFF image...

Astra Linux – Vulnerability in exiv2

There is a vulnerable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26, which can lead to a remote denial-of-service attack due to malicious input...

Astra Linux – Vulnerability in TIF format

LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service application crash or potentially execute arbitrary code through a crafted TIFF image, which triggers a heap-based buffer overflow...

Astra Linux – Vulnerability in TIF format

Libtiff 4.5.0 is vulnerable to a Buffer Overflow issue through the extractContigSamplesBytes function at /libtiff/tools/tiffcrop.c:3215...

Astra Linux – Vulnerability in TIF format

An integer overflow flaw was discovered in libtiff, which resides in the tifgetimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The greatest threat posed by this vulnerability relates to confidentiality, integrity, and system...

Astra Linux – Vulnerability in TIF format

Libtiff 4.5.0 is vulnerable to a Buffer Overflow in the uvencode function when LibTiff reads a corrupted little-endian TIFF file and specifies that the output should be big-endian...

Astra Linux – Vulnerability in TIF format

A buffer overflow in LibTiff v4.0.10 allows attackers to cause a denial of service through the “TIFFVGetField” function in the component ‘libtiff/tifdir.c’...

Astra Linux – Vulnerability in TIF format

LibTIFF 4.3.0 has a out-of-bounds read issue in TIFFmemcpy in tifunix.c, especially in situations where a custom tag is used, and 0x0200 is the second value in the DE field...

Astra Linux – Vulnerability in TIF format

A heap-based buffer overflow flaw was discovered in libtiff, particularly in the handling of TIFF images using libtiff’s TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The greatest threat posed by this vulnerability relates to confidentiality, integrity, and...

CLEANSTART-2024-SB32943 tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3

Security vulnerability affects the evince package. The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3...

Rocky Linux 9.6 [TuxCare] Security Update: cups-filters / cups-filters-devel / cups-filters-libs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1772638779)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772638779 advisory. - CUPS is a standards-based, open-source printing system, and libcupsfilters contains the code of the filters of the former...

Rocky Linux 9 [CIQ] Security Update: libtiff / libtiff-debuginfo / libtiff-debugsource / libtiff-devel / etc (crlsa-2026_19363)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202619363 advisory. libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing CVE-2026-4775 Tenable has extracted the precedi...

Rocky Linux 9.6 [TuxCare] Security Update: libtiff / libtiff-devel / libtiff-static / libtiff-tools (ALMALINUX9.6:CLSA-2026:1785753237)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785753237 advisory. - A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF...

AlmaLinux 9.6 [TuxCare] Security Update: cups-filters / cups-filters-devel / cups-filters-libs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1772638779)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772638779 advisory. - CUPS is a standards-based, open-source printing system, and libcupsfilters contains the code of the filters of the former...

Rocky Linux 8 [CIQ] Security Update: libtiff / libtiff-debuginfo / libtiff-debugsource / libtiff-devel / etc (crlsa-2026_47184)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202647184 advisory. libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image CVE-2026-12912 Tenable has extracted the preceding description block direct...

AlmaLinux 9.2 [TuxCare] Security Update: cups-filters / cups-filters-devel / cups-filters-libs Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1773308416)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1773308416 advisory. - CUPS is a standards-based, open-source printing system, and libcupsfilters contains the code of the filters of the former...

Rocky Linux 9 [CIQ] Security Update: libtiff / libtiff-debuginfo / libtiff-debugsource / libtiff-devel / etc (crlsa-2026_42668)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202642668 advisory. libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image CVE-2026-12912 Tenable has extracted the preceding description block direct...