CVE-2026-48977

A flaw was found in OpenSlide, a C library for reading whole slide image files. A remote attacker could exploit a vulnerability in the parselevel0xml function by providing a specially crafted Ventana BIF file with nonpositive row or column tile counts. This manipulation leads to attacker-controll...

CVE-2026-54604

OpenSlide is a C library for reading whole slide image files. Prior to 4.0.1, a behavior change in libtiff 4.7.1 causes the indirect TIFF tile path in src/openslide-decode-tiff.c and openslidetiffreadtile to request a full-height destination for a partial bottom tile row, allowing uninitialized...

CVE-2026-48977

OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parselevel0xml processing in src/openslide-vendor-ventana.c accepts nonpositive row or column tile counts from a crafted Ventana BIF file. The invalid counts produce attacker-controlled relative memo...

EUVD-2026-82437

OpenSlide is a C library for reading whole slide image files. Prior to 4.0.1, a behavior change in libtiff 4.7.1 causes the indirect TIFF tile path in src/openslide-decode-tiff.c and openslidetiffreadtile to request a full-height destination for a partial bottom tile row, allowing uninitialized...

CVE-2026-54604 OpenSlide: openslide_read_region() returns uninitialized memory with libtiff 4.7.1

OpenSlide is a C library for reading whole slide image files. Prior to 4.0.1, a behavior change in libtiff 4.7.1 causes the indirect TIFF tile path in src/openslide-decode-tiff.c and openslidetiffreadtile to request a full-height destination for a partial bottom tile row, allowing uninitialized...

CVE-2026-54604

Prior to 4.0.1 , OpenSlide is affected by a bug where a behavior change in libtiff 4.7.1 causes the indirect TIFF tile path in src/openslide-decode-tiff.c to request a full-height destination for a partial bottom tile row, allowing uninitialized heap memory to enter pixel data returned by opensli...

CVE-2026-54604 OpenSlide: openslide_read_region() returns uninitialized memory with libtiff 4.7.1

OpenSlide is a C library for reading whole slide image files. Prior to 4.0.1, a behavior change in libtiff 4.7.1 causes the indirect TIFF tile path in src/openslide-decode-tiff.c and openslidetiffreadtile to request a full-height destination for a partial bottom tile row, allowing uninitialized...

CVE-2026-54604 OpenSlide: openslide_read_region() returns uninitialized memory with libtiff 4.7.1

OpenSlide is a C library for reading whole slide image files. Prior to 4.0.1, a behavior change in libtiff 4.7.1 causes the indirect TIFF tile path in src/openslide-decode-tiff.c and openslidetiffreadtile to request a full-height destination for a partial bottom tile row, allowing uninitialized...

CVE-2026-48977 OpenSlide: Arbitrary memory write with crafted Ventana BIF file

OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parselevel0xml processing in src/openslide-vendor-ventana.c accepts nonpositive row or column tile counts from a crafted Ventana BIF file. The invalid counts produce attacker-controlled relative memo...

CVE-2026-48977

OpenSlide is a C library for reading whole slide image files. Versions 3.4.1 through 4.0.1 are affected by an arbitrary memory write vulnerability in parse_level0_xml() within src/openslide-vendor-ventana.c. A crafted Ventana BIF file can supply nonpositive row or column tile counts, producing at...

EUVD-2026-82434

OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parselevel0xml processing in src/openslide-vendor-ventana.c accepts nonpositive row or column tile counts from a crafted Ventana BIF file. The invalid counts produce attacker-controlled relative memo...

CVE-2026-48977 OpenSlide: Arbitrary memory write with crafted Ventana BIF file

OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parselevel0xml processing in src/openslide-vendor-ventana.c accepts nonpositive row or column tile counts from a crafted Ventana BIF file. The invalid counts produce attacker-controlled relative memo...

CVE-2026-48977 OpenSlide: Arbitrary memory write with crafted Ventana BIF file

OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parselevel0xml processing in src/openslide-vendor-ventana.c accepts nonpositive row or column tile counts from a crafted Ventana BIF file. The invalid counts produce attacker-controlled relative memo...

CVE-2026-48977: Write-what-where Condition

OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parselevel0xml processing in src/openslide-vendor-ventana.c accepts nonpositive row or column tile counts from a crafted Ventana BIF file. The invalid counts produce attacker-controlled relative memo...

CVE-2026-54604: Reliance on Undefined, Unspecified, or Implementation-Defined Behavior

OpenSlide is a C library for reading whole slide image files. Prior to 4.0.1, a behavior change in libtiff 4.7.1 causes the indirect TIFF tile path in src/openslide-decode-tiff.c and openslidetiffreadtile to request a full-height destination for a partial bottom tile row, allowing uninitialized...

MGASA-2026-0328 Updated openslide packages fix a security vulnerability

Arbitrary memory write with crafted Ventana BIF file. CVE-2026-48977...

Updated openslide packages fix a security vulnerability

Arbitrary memory write with crafted Ventana BIF file. CVE-2026-48977...

Linux Distros Unpatched Vulnerability : CVE-2026-54604

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSlide is a C library for reading whole slide image files. Prior to 4.0.1, a behavior change in libtiff 4.7.1 causes the indirect TIFF tile path in...

[SECURITY] Fedora 44 Update: openslide-4.0.0-14.fc44

The OpenSlide library allows programs to access virtual slide files regardless of the underlying image format...

Fedora 44 : openslide (2026-e31dda6e44)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e31dda6e44 advisory. Fix arbitrary memory write with crafted Ventana BIF file CVE-2026-48977. Tenable has extracted the preceding description block directly from the Fedora...