CVE-2026-4775

HIGH

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

Title source: cna
STIX 2.1

Description

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

References (24)

Core 24
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:24992
https://access.redhat.com/errata/RHSA-2026:24992
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:25096
https://access.redhat.com/errata/RHSA-2026:25096
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:12265
https://access.redhat.com/errata/RHSA-2026:12265
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:12271
https://access.redhat.com/errata/RHSA-2026:12271
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:25910
https://access.redhat.com/errata/RHSA-2026:25910
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:14929
https://access.redhat.com/errata/RHSA-2026:14929
Vdb Entry, X_Refsource_Redhat vdb-entry x_refsource_redhat
https://access.redhat.com/security/cve/CVE-2026-4775
Issue Tracking, X_Refsource_Redhat issue-tracking x_refsource_redhat
RHBZ#2450768
https://bugzilla.redhat.com/show_bug.cgi?id=2450768
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:16055
https://access.redhat.com/errata/RHSA-2026:16055
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:19150
https://access.redhat.com/errata/RHSA-2026:19150
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:19363
https://access.redhat.com/errata/RHSA-2026:19363
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:19585
https://access.redhat.com/errata/RHSA-2026:19585
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:19586
https://access.redhat.com/errata/RHSA-2026:19586
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:19604
https://access.redhat.com/errata/RHSA-2026:19604
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:19608
https://access.redhat.com/errata/RHSA-2026:19608
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:19609
https://access.redhat.com/errata/RHSA-2026:19609
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:19657
https://access.redhat.com/errata/RHSA-2026:19657
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:19659
https://access.redhat.com/errata/RHSA-2026:19659
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:19702
https://access.redhat.com/errata/RHSA-2026:19702
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:20583
https://access.redhat.com/errata/RHSA-2026:20583
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:20585
https://access.redhat.com/errata/RHSA-2026:20585
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:20591
https://access.redhat.com/errata/RHSA-2026:20591
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:20592
https://access.redhat.com/errata/RHSA-2026:20592

Scores

CVSS v3 7.8
EPSS 0.0033
EPSS Percentile 24.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-190
Status published
Products (43)
debian/debian_linux 11.0
libtiff/libtiff
Red Hat/Red Hat AI Inference Server 3.2 1780681984
Red Hat/Red Hat Enterprise Linux 10
Red Hat/Red Hat Enterprise Linux 10 0:4.6.0-6.el10_1.3
Red Hat/Red Hat Enterprise Linux 10 0:4.6.0-8.el10_2.1
Red Hat/Red Hat Enterprise Linux 10.0 Extended Update Support 0:4.6.0-6.el10_0.3
Red Hat/Red Hat Enterprise Linux 6
Red Hat/Red Hat Enterprise Linux 7
Red Hat/Red Hat Enterprise Linux 7 Extended Lifecycle Support 0:3.9.4-12.el7_9.2
... and 33 more
Published Mar 24, 2026
Tracked Since Mar 24, 2026