CVE-2026-4775
A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.55%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 0.55% probability · 45th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-190
- Affected
- libtiff/libtiff · redhat/hardened images · debian/debian linux · redhat/enterprise linux
- Source
- secalert@redhat.com
References
- https://access.redhat.com/errata/RHSA-2026:12265
- https://access.redhat.com/errata/RHSA-2026:12271
- https://access.redhat.com/errata/RHSA-2026:14929
- https://access.redhat.com/errata/RHSA-2026:16055
- https://access.redhat.com/errata/RHSA-2026:19150
- https://access.redhat.com/errata/RHSA-2026:19363
- https://access.redhat.com/errata/RHSA-2026:19585
- https://access.redhat.com/errata/RHSA-2026:19586
- https://access.redhat.com/errata/RHSA-2026:19604
- https://access.redhat.com/errata/RHSA-2026:19608
- https://access.redhat.com/errata/RHSA-2026:19609
- https://access.redhat.com/errata/RHSA-2026:19657
- https://access.redhat.com/errata/RHSA-2026:19659
- https://access.redhat.com/errata/RHSA-2026:19702
- https://access.redhat.com/errata/RHSA-2026:20583
- https://access.redhat.com/errata/RHSA-2026:20585
- https://access.redhat.com/errata/RHSA-2026:20591
- https://access.redhat.com/errata/RHSA-2026:20592
- https://access.redhat.com/errata/RHSA-2026:24992
- https://access.redhat.com/errata/RHSA-2026:25096
- https://access.redhat.com/errata/RHSA-2026:25910
- https://access.redhat.com/errata/RHSA-2026:30078
- https://access.redhat.com/errata/RHSA-2026:30087
- https://access.redhat.com/errata/RHSA-2026:30088
- https://access.redhat.com/errata/RHSA-2026:30089
- https://access.redhat.com/errata/RHSA-2026:30349
- https://access.redhat.com/errata/RHSA-2026:33388
- https://access.redhat.com/security/cve/CVE-2026-4775Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2450768Issue Tracking, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2026/04/msg00016.htmlMailing List, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.