wid-sec-w-2026-1031
·
Published 2026-04-08
·
View on BSI CERT-Bund ↗
libTIFF: Vulnerability allows Code execution and DoS
CVSS N/A
NONE
Risk Summary
A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.
CVEs (1)
Affected Vendors
Debian
Open Source
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more