Every CVE Search/ Get API key

CVE-2026-12912

Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image

7.3 HighFix available

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.43%Up 0.2 points since Jun 30, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.3

Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).

Record
CVE-2026-12912
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-122, CWE-122
Updated
2026-11-04
EUVDEUVD-2026-40151 7.3

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).

Record
EUVD-2026-40151
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-04
GitHub AdvisoriesGHSA-cg4c-j43f-qcg7 7.3

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a...

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).

Record
GHSA-cg4c-j43f-qcg7
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-122
Updated
2026-11-02
NVD 7.3

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).

Record
CVE-2026-12912
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-122
Updated
2026-11-04
OSVBELL-CVE-2026-12912 7.3
Record
BELL-CVE-2026-12912
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2026-12912 7.3

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).

Record
DEBIAN-CVE-2026-12912
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-05
Show 48 moreShow less
OSVOESA-2026-2924 7.3

libtiff security update

This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.

Security Fix(es):

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).(CVE-2026-12912)

Record
OESA-2026-2924
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2925 7.3

libtiff security update

This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.

Security Fix(es):

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).(CVE-2026-12912)

Record
OESA-2026-2925
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2926 7.3

libtiff security update

This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.

Security Fix(es):

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).(CVE-2026-12912)

Record
OESA-2026-2926
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2927 7.3

libtiff security update

This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.

Security Fix(es):

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).(CVE-2026-12912)

Record
OESA-2026-2927
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2981 7.3

libtiff security update

This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.

Security Fix(es):

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).(CVE-2026-12912)

Record
OESA-2026-2981
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:34890 7.3

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:34890
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:41892 7.5

Red Hat Security Advisory: libtiff security, bug fix, and enhancement update

Record
RHSA-2026:41892
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:42668 7.3

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:42668
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:47183 7.3

Red Hat Security Advisory: compat-libtiff3 security update

Record
RHSA-2026:47183
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:47184 7.3

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:47184
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:49671 7.5

Red Hat Security Advisory: libtiff security, bug fix, and enhancement update

Record
RHSA-2026:49671
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:50774 7.3

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:50774
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:54638 7.3

Red Hat Security Advisory: compat-libtiff3 security update

Record
RHSA-2026:54638
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:54640 7.3

Red Hat Security Advisory: compat-libtiff3 security update

Record
RHSA-2026:54640
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:54642 7.3

Red Hat Security Advisory: compat-libtiff3 security update

Record
RHSA-2026:54642
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:58545 7.3

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:58545
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:58553 7.3

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:58553
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:58554 7.3

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:58554
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:58556 7.3

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:58556
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:61657 7.3

Red Hat Security Advisory: compat-libtiff3 security update

Record
RHSA-2026:61657
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:69292 7.3

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:69292
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:83550 7.3

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:83550
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:41892 7.5

Important: libtiff security, bug fix, and enhancement update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM (CVE-2023-52355)

  • libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)

Bug Fix(es) and Enhancement(s):

  • Reintroduce the tiffcp -i option (JIRA:Rocky Linux-185328)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:41892
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:42668 7.3

Important: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:42668
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:47183 7.3

Important: compat-libtiff3 security update

The libtiff3 package provides libtiff 3, an older version of libtiff library for manipulating TIFF (Tagged Image File Format) image format files. This version should be used only if you are unable to use the current version of libtiff.

Security Fix(es):

  • libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:47183
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:47184 7.3

Important: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:47184
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-12912 7.3

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).

Record
UBUNTU-CVE-2026-12912
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:41892 No score

Important: libtiff security, bug fix, and enhancement update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM (CVE-2023-52355)
  • libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)

Bug Fix(es) and Enhancement(s):

  • Reintroduce the tiffcp -i option (JIRA:AlmaLinux-185328)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:41892
Updated
2026-11-02
OSVALSA-2026:42668 No score

Important: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:42668
Updated
2026-11-02
OSVALSA-2026:47183 No score

Important: compat-libtiff3 security update

The libtiff3 package provides libtiff 3, an older version of libtiff library for manipulating TIFF (Tagged Image File Format) image format files. This version should be used only if you are unable to use the current version of libtiff.

Security Fix(es):

  • libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:47183
Updated
2026-11-02
OSVALSA-2026:47184 No score

Important: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:47184
Updated
2026-11-02
OSVAZL-91685 No score

CVE-2026-12912 affecting package gdal 3.6.3-2

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).

Record
AZL-91685
Updated
2026-11-05
OSVAZL-91688 No score

CVE-2026-12912 affecting package openjpeg2 2.3.1-12

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).

Record
AZL-91688
Updated
2026-11-05
OSVAZL-91722 No score

CVE-2026-12912 affecting package libtiff for versions less than 4.6.0-14

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).

Record
AZL-91722
Updated
2026-11-05
OSVCLSA-2026-1785406290 No score

libtiff: Fix of CVE-2026-12912

  • CVE-2026-12912: heap-based buffer overflow in PixarLog 8BITABGR decode with stride 3
Record
CLSA-2026-1785406290
Updated
2026-11-02
OSVCLSA-2026-1785418348 No score

libtiff: Fix of CVE-2026-12912

  • CVE-2026-12912: fix heap-based buffer overflow in PixarLogDecode() when decoding PixarLog images with the PIXARLOGDATAFMT_8BITABGR output format and stride 3
Record
CLSA-2026-1785418348
Updated
2026-11-02
OSVCLSA-2026-1785753237 No score

libtiff: Fix of CVE-2026-12912

  • CVE-2026-12912: fix heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 in PixarLogDecode()
Record
CLSA-2026-1785753237
Updated
2026-11-02
OSVCLSA-2026-1792241505 No score

libtiff: Fix of CVE-2026-12912

  • Build the rhel7-els target with dist .el7_9 to match the RHEL 7 ELS vendor package suffix
Record
CLSA-2026-1792241505
Updated
2026-11-02
OSVopenSUSE-SU-2026:11225-1 No score

libtiff-devel-32bit-4.7.2-1.1 on GA media

These are all security issues fixed in the libtiff-devel-32bit-4.7.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11225-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21289-1 No score

Security update for tiff

This update for tiff fixes the following issues

  • CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779).
  • CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large SamplesPerPixel tag value (bsc#1268434).

Changes for tiff:

  • Update to 4.7.2:

Software configuration changes:

  • cmake: Fix bundle identifiers to use reverse-DNS format
  • cmake: Fix and improve Apple framework build support
  • cmake: Use TurboJPEG CONFIG by default (issue #767)
  • cmake: changes related to 8-/12-bit modes
  • cmake: Replace CMath::CMath with direct link to avoid export.
  • Support for iOS-derived builds
  • Simplify cmake byte order version check
  • Add additional warnings, primarily floating precision conversions and integer arithmetic conversions
  • configure.ac: Require bootstrap with at least Autoconf 2.71.

Bug fixes:

  • Handle negative TIFFReadFile results before state updates (issue #854)
  • tif_dirread.c: fix copy-paste bug in ChopUpSingleUncompressedStrip
  • tif_read.c: Fixed division by zero in TIFFStartStrip() (issue #777)
  • tif_dirwrite.c: add integer overflow checks to allocation size calculations
  • tif_print.c: add integer overflow checks to allocation size calculations
  • tif_write.c: fix OOB read and underflow in TIFFAppendToStrip copy loop
  • DumpModeSeek: add bounds check to prevent OOB pointer advance
  • TIFFGrowStrips: fix use-after-free on partial realloc failure.
  • Fix NULL dereference in _TIFFReserveLargeEnoughWriteBuffer() by validating the strip bytecount array before accessing it.
  • TIFFRGBAImage: avoid int overflows in put functions (issue #830)
  • tif_getimage: fix inconsistent fromskew handling in put16bitbwtile (issue #792)
  • tif_getimage: Widen pointer-offset arithmetic in tif_getimage
  • putcontig8bitYCbCr44tile: fix wrong fromskew computation (issue #798)
  • putcontig8bitYCbCr42tile: Reject invalid YCbCr subsampling when image dimensions are smaller than the subsampling block to prevent out-of-bounds writes. (issue #753)
  • TIFFFillStrip/Tile(): avoid excessive memory allocation (issue #831)
  • TIFFLinkDirectory() checks for IFD loops (issue #788)
  • Check result of _TIFFCheckRealloc to prevent memory leaks and segmentation fault when reallocation fails.
  • TIFFVTileSize64(): in YCbCr contig non upsampled mode, validate td_samplesperpixel==3 (issue #805)
  • TIFFReadDirEntryPersampleShort(): be tolerant to tags like SampleFormat not having 1 or SamplesPerPixel values (https://github.com/OSGeo/gdal/issues/13465)
  • tif_getimage: reject tile widths that would overflow toskew (issue #808)
  • Fix integer overflow in _TIFFPartialReadStripArray on 32-bit.
  • TIFFAppendToStrip(): add some checks to avoid null-pointer-dereferencing (issue #777).
  • _TIFFGetStrileOffsetOrByteCountValue(): fix potential crash on corrupted files when file opened in 'O' mode (https://issues.oss-fuzz.com/issues/471328917)
  • TIFFReadDirectory(): re-set TIFF_LAZYSTRILELOAD if file opened in 'O' mode
  • _TIFFMergeFields(): avoid NULL ptr dereference (issue #755).
  • Check td_stripbytecount_p and td_stripoffset_p for NULL pointer before (re-)writing to file. (issue #749)
  • JPEGDecodeRaw: initialize output buffer to avoid returning uninitialized memory (issue #892)
  • JPEG decompressor: initialize output buffer when JPEG image is smaller than strile dimension to avoid heap memory disclosure (issue #826)
  • JPEG: fix generation of tiled 12-bit JPEG compressed files with libjpeg-turbo 3.0.3 (issue #773)
  • JPEGDecode(): fix memory leak in error code path (https://issues.oss-fuzz.com/issues/471945501)
  • tif_jpeg: reject mismatched JPEG data precision to avoid write overflow
  • Fix signed left-shift UB in LogLuv RANDITHER encoding (issue #850)
  • PixarLog: error out on invalid ABGR output buffer sizes.
  • PixarLog: complete ABGR bounds check for multi-row strip decoding.
  • PixarLog: fix undoing horizontal differencing when SamplesPerPixel != 3 and…
Record
openSUSE-SU-2026:21289-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-12912 No score

CVE-2026-12912 in tiff - Patched by Root

Root has patched CVE-2026-12912 in the tiff package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-12912
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-12912 No score

CVE-2026-12912 in tiff - Patched by Root

Root has patched CVE-2026-12912 in the tiff package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-12912
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2026-12912 No score

CVE-2026-12912 in rootio-tiff - Patched by Root

Root has patched CVE-2026-12912 in the rootio-tiff package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2026-12912
Updated
2026-11-02
OSVSUSE-SU-2026:22590-1 No score

Security update for tiff

This update for tiff fixes the following issues

  • CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779).
  • CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large SamplesPerPixel tag value (bsc#1268434).

Changes for tiff:

  • Update to 4.7.2:

Software configuration changes:

  • cmake: Fix bundle identifiers to use reverse-DNS format
  • cmake: Fix and improve Apple framework build support
  • cmake: Use TurboJPEG CONFIG by default (issue #767)
  • cmake: changes related to 8-/12-bit modes
  • cmake: Replace CMath::CMath with direct link to avoid export.
  • Support for iOS-derived builds
  • Simplify cmake byte order version check
  • Add additional warnings, primarily floating precision conversions and integer arithmetic conversions
  • configure.ac: Require bootstrap with at least Autoconf 2.71.

Bug fixes:

  • Handle negative TIFFReadFile results before state updates (issue #854)
  • tif_dirread.c: fix copy-paste bug in ChopUpSingleUncompressedStrip
  • tif_read.c: Fixed division by zero in TIFFStartStrip() (issue #777)
  • tif_dirwrite.c: add integer overflow checks to allocation size calculations
  • tif_print.c: add integer overflow checks to allocation size calculations
  • tif_write.c: fix OOB read and underflow in TIFFAppendToStrip copy loop
  • DumpModeSeek: add bounds check to prevent OOB pointer advance
  • TIFFGrowStrips: fix use-after-free on partial realloc failure.
  • Fix NULL dereference in _TIFFReserveLargeEnoughWriteBuffer() by validating the strip bytecount array before accessing it.
  • TIFFRGBAImage: avoid int overflows in put functions (issue #830)
  • tif_getimage: fix inconsistent fromskew handling in put16bitbwtile (issue #792)
  • tif_getimage: Widen pointer-offset arithmetic in tif_getimage
  • putcontig8bitYCbCr44tile: fix wrong fromskew computation (issue #798)
  • putcontig8bitYCbCr42tile: Reject invalid YCbCr subsampling when image dimensions are smaller than the subsampling block to prevent out-of-bounds writes. (issue #753)
  • TIFFFillStrip/Tile(): avoid excessive memory allocation (issue #831)
  • TIFFLinkDirectory() checks for IFD loops (issue #788)
  • Check result of _TIFFCheckRealloc to prevent memory leaks and segmentation fault when reallocation fails.
  • TIFFVTileSize64(): in YCbCr contig non upsampled mode, validate td_samplesperpixel==3 (issue #805)
  • TIFFReadDirEntryPersampleShort(): be tolerant to tags like SampleFormat not having 1 or SamplesPerPixel values (https://github.com/OSGeo/gdal/issues/13465)
  • tif_getimage: reject tile widths that would overflow toskew (issue #808)
  • Fix integer overflow in _TIFFPartialReadStripArray on 32-bit.
  • TIFFAppendToStrip(): add some checks to avoid null-pointer-dereferencing (issue #777).
  • _TIFFGetStrileOffsetOrByteCountValue(): fix potential crash on corrupted files when file opened in 'O' mode (https://issues.oss-fuzz.com/issues/471328917)
  • TIFFReadDirectory(): re-set TIFF_LAZYSTRILELOAD if file opened in 'O' mode
  • _TIFFMergeFields(): avoid NULL ptr dereference (issue #755).
  • Check td_stripbytecount_p and td_stripoffset_p for NULL pointer before (re-)writing to file. (issue #749)
  • JPEGDecodeRaw: initialize output buffer to avoid returning uninitialized memory (issue #892)
  • JPEG decompressor: initialize output buffer when JPEG image is smaller than strile dimension to avoid heap memory disclosure (issue #826)
  • JPEG: fix generation of tiled 12-bit JPEG compressed files with libjpeg-turbo 3.0.3 (issue #773)
  • JPEGDecode(): fix memory leak in error code path (https://issues.oss-fuzz.com/issues/471945501)
  • tif_jpeg: reject mismatched JPEG data precision to avoid write overflow
  • Fix signed left-shift UB in LogLuv RANDITHER encoding (issue #850)
  • PixarLog: error out on invalid ABGR output buffer sizes.
  • PixarLog: complete ABGR bounds check for multi-row strip decoding.
  • PixarLog: fix undoing horizontal differencing when SamplesPerPixel != 3 and…
Record
SUSE-SU-2026:22590-1
Updated
2026-11-02
OSVSUSE-SU-2026:22616-1 No score

Security update for tiff

This update for tiff fixes the following issues

  • CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779).
  • CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large SamplesPerPixel tag value (bsc#1268434).

Changes for tiff:

  • Update to 4.7.2:

Software configuration changes:

  • cmake: Fix bundle identifiers to use reverse-DNS format
  • cmake: Fix and improve Apple framework build support
  • cmake: Use TurboJPEG CONFIG by default (issue #767)
  • cmake: changes related to 8-/12-bit modes
  • cmake: Replace CMath::CMath with direct link to avoid export.
  • Support for iOS-derived builds
  • Simplify cmake byte order version check
  • Add additional warnings, primarily floating precision conversions and integer arithmetic conversions
  • configure.ac: Require bootstrap with at least Autoconf 2.71.

Bug fixes:

  • Handle negative TIFFReadFile results before state updates (issue #854)
  • tif_dirread.c: fix copy-paste bug in ChopUpSingleUncompressedStrip
  • tif_read.c: Fixed division by zero in TIFFStartStrip() (issue #777)
  • tif_dirwrite.c: add integer overflow checks to allocation size calculations
  • tif_print.c: add integer overflow checks to allocation size calculations
  • tif_write.c: fix OOB read and underflow in TIFFAppendToStrip copy loop
  • DumpModeSeek: add bounds check to prevent OOB pointer advance
  • TIFFGrowStrips: fix use-after-free on partial realloc failure.
  • Fix NULL dereference in _TIFFReserveLargeEnoughWriteBuffer() by validating the strip bytecount array before accessing it.
  • TIFFRGBAImage: avoid int overflows in put functions (issue #830)
  • tif_getimage: fix inconsistent fromskew handling in put16bitbwtile (issue #792)
  • tif_getimage: Widen pointer-offset arithmetic in tif_getimage
  • putcontig8bitYCbCr44tile: fix wrong fromskew computation (issue #798)
  • putcontig8bitYCbCr42tile: Reject invalid YCbCr subsampling when image dimensions are smaller than the subsampling block to prevent out-of-bounds writes. (issue #753)
  • TIFFFillStrip/Tile(): avoid excessive memory allocation (issue #831)
  • TIFFLinkDirectory() checks for IFD loops (issue #788)
  • Check result of _TIFFCheckRealloc to prevent memory leaks and segmentation fault when reallocation fails.
  • TIFFVTileSize64(): in YCbCr contig non upsampled mode, validate td_samplesperpixel==3 (issue #805)
  • TIFFReadDirEntryPersampleShort(): be tolerant to tags like SampleFormat not having 1 or SamplesPerPixel values (https://github.com/OSGeo/gdal/issues/13465)
  • tif_getimage: reject tile widths that would overflow toskew (issue #808)
  • Fix integer overflow in _TIFFPartialReadStripArray on 32-bit.
  • TIFFAppendToStrip(): add some checks to avoid null-pointer-dereferencing (issue #777).
  • _TIFFGetStrileOffsetOrByteCountValue(): fix potential crash on corrupted files when file opened in 'O' mode (https://issues.oss-fuzz.com/issues/471328917)
  • TIFFReadDirectory(): re-set TIFF_LAZYSTRILELOAD if file opened in 'O' mode
  • _TIFFMergeFields(): avoid NULL ptr dereference (issue #755).
  • Check td_stripbytecount_p and td_stripoffset_p for NULL pointer before (re-)writing to file. (issue #749)
  • JPEGDecodeRaw: initialize output buffer to avoid returning uninitialized memory (issue #892)
  • JPEG decompressor: initialize output buffer when JPEG image is smaller than strile dimension to avoid heap memory disclosure (issue #826)
  • JPEG: fix generation of tiled 12-bit JPEG compressed files with libjpeg-turbo 3.0.3 (issue #773)
  • JPEGDecode(): fix memory leak in error code path (https://issues.oss-fuzz.com/issues/471945501)
  • tif_jpeg: reject mismatched JPEG data precision to avoid write overflow
  • Fix signed left-shift UB in LogLuv RANDITHER encoding (issue #850)
  • PixarLog: error out on invalid ABGR output buffer sizes.
  • PixarLog: complete ABGR bounds check for multi-row strip decoding.
  • PixarLog: fix undoing horizontal differencing when SamplesPerPixel != 3 and…
Record
SUSE-SU-2026:22616-1
Updated
2026-11-02
OSVSUSE-SU-2026:22796-1 No score

Security update for tiff

This update for tiff fixes the following issues:

Update to version 4.7.2.

Security issues fixed:

  • CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779).
  • CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large SamplesPerPixel tag value (bsc#1268434).

Other updates and bugfixes:

  • Enable Lerc support in openSUSE (bsc#1257123).
  • Version 4.7.2:
    • Software configuration changes:
      • cmake: Fix bundle identifiers to use reverse-DNS format
      • cmake: Fix and improve Apple framework build support
      • cmake: Use TurboJPEG CONFIG by default (issue #767)
      • cmake: changes related to 8-/12-bit modes
      • cmake: Replace CMath::CMath with direct link to avoid export.
      • Support for iOS-derived builds
      • Simplify cmake byte order version check
      • Add additional warnings, primarily floating precision conversions and integer arithmetic conversions
      • configure.ac: Require bootstrap with at least Autoconf 2.71.
    • Library changes:
      • New/improved functionalities::
      • Add TIFFGetMaxCompressionRatio() and use it in _TIFFReadEncoded[Tile|Strip)AndAllocBuffer() (issue #781)
    • Bug fixes:
      • Handle negative TIFFReadFile results before state updates (issue #854)
      • tif_dirread.c: fix copy-paste bug in ChopUpSingleUncompressedStrip
      • tif_read.c: Fixed division by zero in TIFFStartStrip() (issue #777)
      • tif_dirwrite.c: add integer overflow checks to allocation size calculations
      • tif_print.c: add integer overflow checks to allocation size calculations
      • tif_write.c: fix OOB read and underflow in TIFFAppendToStrip copy loop
      • DumpModeSeek: add bounds check to prevent OOB pointer advance
      • TIFFGrowStrips: fix use-after-free on partial realloc failure.
      • Fix NULL dereference in _TIFFReserveLargeEnoughWriteBuffer() by validating the strip bytecount array before accessing it.
      • TIFFRGBAImage: avoid int overflows in put functions (issue #830)
      • tif_getimage: fix inconsistent fromskew handling in put16bitbwtile (issue #792)
      • tif_getimage: Widen pointer-offset arithmetic in tif_getimage
      • putcontig8bitYCbCr44tile: fix wrong fromskew computation (issue #798)
      • putcontig8bitYCbCr42tile: Reject invalid YCbCr subsampling when image dimensions are smaller than the subsampling block to prevent out-of-bounds writes. (issue #753)
      • TIFFReadRGBAImage(): prevent integer overflow and later heap overflow (issue #787)
      • TIFFFillStrip/Tile(): avoid excessive memory allocation (issue #831)
      • TIFFLinkDirectory() checks for IFD loops (issue #788)
      • Check result of _TIFFCheckRealloc to prevent memory leaks and segmentation fault when reallocation fails.
      • TIFFVTileSize64(): in YCbCr contig non upsampled mode, validate td_samplesperpixel==3 (issue #805)
      • TIFFReadDirEntryPersampleShort(): be tolerant to tags like SampleFormat not having 1 or SamplesPerPixel values (https://github.com/OSGeo/gdal/issues/13465)
      • tif_getimage: reject tile widths that would overflow toskew (issue #808)
      • Fix integer overflow in _TIFFPartialReadStripArray on 32-bit.
      • TIFFAppendToStrip(): add some checks to avoid null-pointer-dereferencing (issue #777).
      • _TIFFGetStrileOffsetOrByteCountValue(): fix potential crash on corrupted files when file opened in 'O' mode (https://issues.oss-fuzz.com/issues/471328917)
      • TIFFReadDirectory(): re-set TIFF_LAZYSTRILELOAD if file opened in 'O' mode
      • _TIFFMergeFields(): avoid NULL ptr dereference (issue #755).
      • Check td_stripbytecount_p and td_stripoffset_p for NULL pointer before (re-)writing to file. (issue #749)
      • JPEGDecodeRaw: initialize output buffer to avoid returning uninitialized memory (issue #892)
      • JPEG decompressor: initialize output buffer when JPEG image is smaller than strile dimension to avoid heap memory disclosure (issue #826)
      • JPEG: fix generation of tiled 12-bit…
Record
SUSE-SU-2026:22796-1
Updated
2026-11-02
OSVSUSE-SU-2026:22886-1 No score

Security update for tiff

This update for tiff fixes the following issues

Update to version 4.7.2.

Security issues fixed:

  • CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779).
  • CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large SamplesPerPixel tag value (bsc#1268434).

Other updates and bugfixes:

  • Enable Lerc support in openSUSE (bsc#1257123).
  • Version 4.7.2:
    • Software configuration changes:
      • cmake: Fix bundle identifiers to use reverse-DNS format
      • cmake: Fix and improve Apple framework build support
      • cmake: Use TurboJPEG CONFIG by default (issue #767)
      • cmake: changes related to 8-/12-bit modes
      • cmake: Replace CMath::CMath with direct link to avoid export.
      • Support for iOS-derived builds
      • Simplify cmake byte order version check
      • Add additional warnings, primarily floating precision conversions and integer arithmetic conversions
      • configure.ac: Require bootstrap with at least Autoconf 2.71.
    • Library changes:
      • New/improved functionalities::
      • Add TIFFGetMaxCompressionRatio() and use it in _TIFFReadEncoded[Tile|Strip)AndAllocBuffer() (issue #781)
    • Bug fixes:
      • Handle negative TIFFReadFile results before state updates (issue #854)
      • tif_dirread.c: fix copy-paste bug in ChopUpSingleUncompressedStrip
      • tif_read.c: Fixed division by zero in TIFFStartStrip() (issue #777)
      • tif_dirwrite.c: add integer overflow checks to allocation size calculations
      • tif_print.c: add integer overflow checks to allocation size calculations
      • tif_write.c: fix OOB read and underflow in TIFFAppendToStrip copy loop
      • DumpModeSeek: add bounds check to prevent OOB pointer advance
      • TIFFGrowStrips: fix use-after-free on partial realloc failure.
      • Fix NULL dereference in _TIFFReserveLargeEnoughWriteBuffer() by validating the strip bytecount array before accessing it.
      • TIFFRGBAImage: avoid int overflows in put functions (issue #830)
      • tif_getimage: fix inconsistent fromskew handling in put16bitbwtile (issue #792)
      • tif_getimage: Widen pointer-offset arithmetic in tif_getimage
      • putcontig8bitYCbCr44tile: fix wrong fromskew computation (issue #798)
      • putcontig8bitYCbCr42tile: Reject invalid YCbCr subsampling when image dimensions are smaller than the subsampling block to prevent out-of-bounds writes. (issue #753)
      • TIFFReadRGBAImage(): prevent integer overflow and later heap overflow (issue #787)
      • TIFFFillStrip/Tile(): avoid excessive memory allocation (issue #831)
      • TIFFLinkDirectory() checks for IFD loops (issue #788)
      • Check result of _TIFFCheckRealloc to prevent memory leaks and segmentation fault when reallocation fails.
      • TIFFVTileSize64(): in YCbCr contig non upsampled mode, validate td_samplesperpixel==3 (issue #805)
      • TIFFReadDirEntryPersampleShort(): be tolerant to tags like SampleFormat not having 1 or SamplesPerPixel values (https://github.com/OSGeo/gdal/issues/13465)
      • tif_getimage: reject tile widths that would overflow toskew (issue #808)
      • Fix integer overflow in _TIFFPartialReadStripArray on 32-bit.
      • TIFFAppendToStrip(): add some checks to avoid null-pointer-dereferencing (issue #777).
      • _TIFFGetStrileOffsetOrByteCountValue(): fix potential crash on corrupted files when file opened in 'O' mode (https://issues.oss-fuzz.com/issues/471328917)
      • TIFFReadDirectory(): re-set TIFF_LAZYSTRILELOAD if file opened in 'O' mode
      • _TIFFMergeFields(): avoid NULL ptr dereference (issue #755).
      • Check td_stripbytecount_p and td_stripoffset_p for NULL pointer before (re-)writing to file. (issue #749)
      • JPEGDecodeRaw: initialize output buffer to avoid returning uninitialized memory (issue #892)
      • JPEG decompressor: initialize output buffer when JPEG image is smaller than strile dimension to avoid heap memory disclosure (issue #826)
      • JPEG: fix generation of tiled 12-bit…
Record
SUSE-SU-2026:22886-1
Updated
2026-11-02
OSVSUSE-SU-2026:2853-1 No score

Security update for tiff

This update for tiff fixes the following issues:

Update to version 4.7.2.

Security issues fixed:

  • CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779).
  • CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large SamplesPerPixel tag value (bsc#1268434).

Other updates and bugfixes:

  • Version 4.7.2:
    • Software configuration changes:
      • cmake: Fix bundle identifiers to use reverse-DNS format
      • cmake: Fix and improve Apple framework build support
      • cmake: Use TurboJPEG CONFIG by default (issue #767)
      • cmake: changes related to 8-/12-bit modes
      • cmake: Replace CMath::CMath with direct link to avoid export.
      • Support for iOS-derived builds
      • Simplify cmake byte order version check
      • Add additional warnings, primarily floating precision conversions and integer arithmetic conversions
      • configure.ac: Require bootstrap with at least Autoconf 2.71.
    • Library changes:
      • New/improved functionalities::
      • Add TIFFGetMaxCompressionRatio() and use it in _TIFFReadEncoded[Tile|Strip)AndAllocBuffer() (issue #781)
    • Bug fixes:
      • Handle negative TIFFReadFile results before state updates (issue #854)
      • tif_dirread.c: fix copy-paste bug in ChopUpSingleUncompressedStrip
      • tif_read.c: Fixed division by zero in TIFFStartStrip() (issue #777)
      • tif_dirwrite.c: add integer overflow checks to allocation size calculations
      • tif_print.c: add integer overflow checks to allocation size calculations
      • tif_write.c: fix OOB read and underflow in TIFFAppendToStrip copy loop
      • DumpModeSeek: add bounds check to prevent OOB pointer advance
      • TIFFGrowStrips: fix use-after-free on partial realloc failure.
      • Fix NULL dereference in _TIFFReserveLargeEnoughWriteBuffer() by validating the strip bytecount array before accessing it.
      • TIFFRGBAImage: avoid int overflows in put functions (issue #830)
      • tif_getimage: fix inconsistent fromskew handling in put16bitbwtile (issue #792)
      • tif_getimage: Widen pointer-offset arithmetic in tif_getimage
      • putcontig8bitYCbCr44tile: fix wrong fromskew computation (issue #798)
      • putcontig8bitYCbCr42tile: Reject invalid YCbCr subsampling when image dimensions are smaller than the subsampling block to prevent out-of-bounds writes. (issue #753)
      • TIFFReadRGBAImage(): prevent integer overflow and later heap overflow (issue #787)
      • TIFFFillStrip/Tile(): avoid excessive memory allocation (issue #831)
      • TIFFLinkDirectory() checks for IFD loops (issue #788)
      • Check result of _TIFFCheckRealloc to prevent memory leaks and segmentation fault when reallocation fails.
      • TIFFVTileSize64(): in YCbCr contig non upsampled mode, validate td_samplesperpixel==3 (issue #805)
      • TIFFReadDirEntryPersampleShort(): be tolerant to tags like SampleFormat not having 1 or SamplesPerPixel values (https://github.com/OSGeo/gdal/issues/13465)
      • tif_getimage: reject tile widths that would overflow toskew (issue #808)
      • Fix integer overflow in _TIFFPartialReadStripArray on 32-bit.
      • TIFFAppendToStrip(): add some checks to avoid null-pointer-dereferencing (issue #777).
      • _TIFFGetStrileOffsetOrByteCountValue(): fix potential crash on corrupted files when file opened in 'O' mode (https://issues.oss-fuzz.com/issues/471328917)
      • TIFFReadDirectory(): re-set TIFF_LAZYSTRILELOAD if file opened in 'O' mode
      • _TIFFMergeFields(): avoid NULL ptr dereference (issue #755).
      • Check td_stripbytecount_p and td_stripoffset_p for NULL pointer before (re-)writing to file. (issue #749)
      • JPEGDecodeRaw: initialize output buffer to avoid returning uninitialized memory (issue #892)
      • JPEG decompressor: initialize output buffer when JPEG image is smaller than strile dimension to avoid heap memory disclosure (issue #826)
      • JPEG: fix generation of tiled 12-bit JPEG compressed files with libjpeg-turbo 3.0.3…
Record
SUSE-SU-2026:2853-1
Updated
2026-11-02

Affected products

Show 8 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
libtiff
AlmaLinux:10
From an advisory covering 2 CVEs
 before 4.6.0-8.el10_2.4
4.6.0-8.el10_2.4
libtiff-devel
AlmaLinux:10
From an advisory covering 2 CVEs
 before 4.6.0-8.el10_2.4
4.6.0-8.el10_2.4
libtiff-tools
AlmaLinux:10
From an advisory covering 2 CVEs
 before 4.6.0-8.el10_2.4
4.6.0-8.el10_2.4
libtiff
AlmaLinux:9
 before 4.4.0-18.el9_8.1
4.4.0-18.el9_8.1
libtiff-devel
AlmaLinux:9
 before 4.4.0-18.el9_8.1
4.4.0-18.el9_8.1
libtiff-tools
AlmaLinux:9
 before 4.4.0-18.el9_8.1
4.4.0-18.el9_8.1
compat-libtiff3
AlmaLinux:8
 before 3.9.4-16.el8_10
3.9.4-16.el8_10
libtiff
AlmaLinux:8
 before 4.0.9-38.el8_10
4.0.9-38.el8_10
libtiff-devel
AlmaLinux:8
 before 4.0.9-38.el8_10
4.0.9-38.el8_10
libtiff-tools
AlmaLinux:8
 before 4.0.9-38.el8_10
4.0.9-38.el8_10
Show 165 moreShow less
Affected packages
PackageAffectedFixed
gdal
Azure Linux:3
 through 3.6.3-2 None known
openjpeg2
Azure Linux:3
 through 2.3.1-12 None known
libtiff
Azure Linux:3
 before 4.6.0-14
4.6.0-14
tiff
Alpaquita:stream
 4.4.0-r1 up to 4.7.2-r0
4.7.2-r0
tiff
BellSoft Hardened Containers:stream
 4.4.0-r1 up to 4.7.2-r0
4.7.2-r0
libtiff
TuxCare:AlmaLinux:9.2
 before 4.4.0-8.el9_2.tuxcare.els13
4.4.0-8.el9_2.tuxcare.els13
libtiff-devel
TuxCare:AlmaLinux:9.2
 before 4.4.0-8.el9_2.tuxcare.els13
4.4.0-8.el9_2.tuxcare.els13
libtiff-static
TuxCare:AlmaLinux:9.2
 before 4.4.0-8.el9_2.tuxcare.els13
4.4.0-8.el9_2.tuxcare.els13
libtiff-tools
TuxCare:AlmaLinux:9.2
 before 4.4.0-8.el9_2.tuxcare.els13
4.4.0-8.el9_2.tuxcare.els13
libtiff
TuxCare:CentOS:7
 before 4.0.3-35.el7.tuxcare.els11
4.0.3-35.el7.tuxcare.els11
libtiff-devel
TuxCare:CentOS:7
 before 4.0.3-35.el7.tuxcare.els11
4.0.3-35.el7.tuxcare.els11
libtiff-static
TuxCare:CentOS:7
 before 4.0.3-35.el7.tuxcare.els11
4.0.3-35.el7.tuxcare.els11
libtiff-tools
TuxCare:CentOS:7
 before 4.0.3-35.el7.tuxcare.els11
4.0.3-35.el7.tuxcare.els11
libtiff
TuxCare:AlmaLinux:9.6
 before 4.4.0-13.el9_6.2.tuxcare.els11
4.4.0-13.el9_6.2.tuxcare.els11
libtiff-devel
TuxCare:AlmaLinux:9.6
 before 4.4.0-13.el9_6.2.tuxcare.els11
4.4.0-13.el9_6.2.tuxcare.els11
libtiff-static
TuxCare:AlmaLinux:9.6
 before 4.4.0-13.el9_6.2.tuxcare.els11
4.4.0-13.el9_6.2.tuxcare.els11
libtiff-tools
TuxCare:AlmaLinux:9.6
 before 4.4.0-13.el9_6.2.tuxcare.els11
4.4.0-13.el9_6.2.tuxcare.els11
libtiff
TuxCare:OracleLinux:7
 before 4.0.3-35.0.1.el7.tuxcare.els2
4.0.3-35.0.1.el7.tuxcare.els2
libtiff-devel
TuxCare:OracleLinux:7
 before 4.0.3-35.0.1.el7.tuxcare.els2
4.0.3-35.0.1.el7.tuxcare.els2
libtiff-static
TuxCare:OracleLinux:7
 before 4.0.3-35.0.1.el7.tuxcare.els2
4.0.3-35.0.1.el7.tuxcare.els2
libtiff-tools
TuxCare:OracleLinux:7
 before 4.0.3-35.0.1.el7.tuxcare.els2
4.0.3-35.0.1.el7.tuxcare.els2
tiff
Debian:12
 All versions, plus listed versions
4.5.0-64.5.0-6+deb12u14.5.0-6+deb12u24.5.0-6+deb12u34.5.0-6+deb12u4
Show 18 moreShow less
4.5.1+git230720-14.5.1+git230720-24.5.1+git230720-34.5.1+git230720-44.5.1+git230720-54.5.1-14.5.1~rc3-14.6.0-14.6.0-24.7.0-14.7.0-24.7.0-34.7.0-44.7.0-54.7.1-14.7.1-24.7.1-34.7.2-1
 None known
tiff
Debian:13
 before 4.7.0-3+deb13u3, plus listed versions
4.7.0-34.7.0-3+deb13u14.7.0-3+deb13u2
4.7.0-3+deb13u3
tiff
Debian:14
 before 4.7.2-1, plus listed versions
4.7.0-34.7.0-44.7.0-54.7.1-14.7.1-24.7.1-3
4.7.2-1
libtiff
openEuler:22.03-LTS-SP4
 before 4.3.0-52.oe2203sp4
4.3.0-52.oe2203sp4
libtiff
openEuler:24.03-LTS-SP1
 before 4.6.0-11.oe2403sp1
4.6.0-11.oe2403sp1
libtiff
openEuler:24.03-LTS-SP3
 before 4.6.0-11.oe2403sp3
4.6.0-11.oe2403sp3
libtiff
openEuler:20.03-LTS-SP4
 before 4.3.0-38.oe2003sp4
4.3.0-38.oe2003sp4
libtiff
openEuler:24.03-LTS-SP4
 before 4.6.0-11.oe2403sp4
4.6.0-11.oe2403sp4
libtiff
Red Hat:hummingbird:1
 before 0:4.7.1-2.4.hum1
0:4.7.1-2.4.hum1
libtiff-devel
Red Hat:hummingbird:1
 before 0:4.7.1-2.4.hum1
0:4.7.1-2.4.hum1
libtiff-static
Red Hat:hummingbird:1
 before 0:4.7.1-2.4.hum1
0:4.7.1-2.4.hum1
libtiff-tools
Red Hat:hummingbird:1
 before 0:4.7.1-2.4.hum1
0:4.7.1-2.4.hum1
libtiff
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:4.6.0-8.el10_2.4
0:4.6.0-8.el10_2.4
libtiff-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:4.6.0-8.el10_2.4
0:4.6.0-8.el10_2.4
libtiff-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:4.6.0-8.el10_2.4
0:4.6.0-8.el10_2.4
libtiff-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:4.6.0-8.el10_2.4
0:4.6.0-8.el10_2.4
libtiff-tools-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:4.6.0-8.el10_2.4
0:4.6.0-8.el10_2.4
libtiff-tools
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:4.6.0-8.el10_2.4
0:4.6.0-8.el10_2.4
libtiff
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-18.el9_8.1
0:4.4.0-18.el9_8.1
libtiff-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-18.el9_8.1
0:4.4.0-18.el9_8.1
libtiff-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-18.el9_8.1
0:4.4.0-18.el9_8.1
libtiff-devel
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-18.el9_8.1
0:4.4.0-18.el9_8.1
libtiff-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-18.el9_8.1
0:4.4.0-18.el9_8.1
libtiff-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:4.4.0-18.el9_8.1
0:4.4.0-18.el9_8.1
libtiff-debugsource
Red Hat:enterprise_linux:9::crb
 before 0:4.4.0-18.el9_8.1
0:4.4.0-18.el9_8.1
libtiff-tools
Red Hat:enterprise_linux:9::crb
 before 0:4.4.0-18.el9_8.1
0:4.4.0-18.el9_8.1
libtiff-tools-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:4.4.0-18.el9_8.1
0:4.4.0-18.el9_8.1
compat-libtiff3
Red Hat:enterprise_linux:8::appstream
 before 0:3.9.4-16.el8_10
0:3.9.4-16.el8_10
compat-libtiff3-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:3.9.4-16.el8_10
0:3.9.4-16.el8_10
compat-libtiff3-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:3.9.4-16.el8_10
0:3.9.4-16.el8_10
libtiff
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-38.el8_10
0:4.0.9-38.el8_10
libtiff-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-38.el8_10
0:4.0.9-38.el8_10
libtiff-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-38.el8_10
0:4.0.9-38.el8_10
libtiff-devel
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-38.el8_10
0:4.0.9-38.el8_10
libtiff-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-38.el8_10
0:4.0.9-38.el8_10
libtiff-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-38.el8_10
0:4.0.9-38.el8_10
libtiff-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-38.el8_10
0:4.0.9-38.el8_10
libtiff-tools
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-38.el8_10
0:4.0.9-38.el8_10
libtiff-tools-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-38.el8_10
0:4.0.9-38.el8_10
libtiff
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:4.6.0-6.el10_0.4
0:4.6.0-6.el10_0.4
libtiff-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:4.6.0-6.el10_0.4
0:4.6.0-6.el10_0.4
libtiff-debugsource
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:4.6.0-6.el10_0.4
0:4.6.0-6.el10_0.4
libtiff-devel
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:4.6.0-6.el10_0.4
0:4.6.0-6.el10_0.4
libtiff-tools-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:4.6.0-6.el10_0.4
0:4.6.0-6.el10_0.4
libtiff-tools
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:4.6.0-6.el10_0.4
0:4.6.0-6.el10_0.4
libtiff
Red Hat:rhel_eus:9.6::appstream
 before 0:4.4.0-13.el9_6.6
0:4.4.0-13.el9_6.6
libtiff-debuginfo
Red Hat:rhel_eus:9.6::appstream
 before 0:4.4.0-13.el9_6.6
0:4.4.0-13.el9_6.6
libtiff-debugsource
Red Hat:rhel_eus:9.6::appstream
 before 0:4.4.0-13.el9_6.6
0:4.4.0-13.el9_6.6
libtiff-devel
Red Hat:rhel_eus:9.6::appstream
 before 0:4.4.0-13.el9_6.6
0:4.4.0-13.el9_6.6
libtiff-tools-debuginfo
Red Hat:rhel_eus:9.6::appstream
 before 0:4.4.0-13.el9_6.6
0:4.4.0-13.el9_6.6
libtiff-debuginfo
Red Hat:rhel_eus:9.6::crb
 before 0:4.4.0-13.el9_6.6
0:4.4.0-13.el9_6.6
libtiff-debugsource
Red Hat:rhel_eus:9.6::crb
 before 0:4.4.0-13.el9_6.6
0:4.4.0-13.el9_6.6
libtiff-tools
Red Hat:rhel_eus:9.6::crb
 before 0:4.4.0-13.el9_6.6
0:4.4.0-13.el9_6.6
libtiff-tools-debuginfo
Red Hat:rhel_eus:9.6::crb
 before 0:4.4.0-13.el9_6.6
0:4.4.0-13.el9_6.6
compat-libtiff3
Red Hat:rhel_e4s:8.8::appstream
 before 0:3.9.4-13.el8_8.3
0:3.9.4-13.el8_8.3
compat-libtiff3
Red Hat:rhel_tus:8.8::appstream
 before 0:3.9.4-13.el8_8.3
0:3.9.4-13.el8_8.3
compat-libtiff3
Red Hat:rhel_aus:8.6::appstream
 before 0:3.9.4-13.el8_6.3
0:3.9.4-13.el8_6.3
compat-libtiff3
Red Hat:rhel_eus_long_life:8.6::appstream
 before 0:3.9.4-13.el8_6.3
0:3.9.4-13.el8_6.3
compat-libtiff3
Red Hat:rhel_aus:8.4::appstream
 before 0:3.9.4-13.el8_4.3
0:3.9.4-13.el8_4.3
compat-libtiff3
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:3.9.4-13.el8_4.3
0:3.9.4-13.el8_4.3
libtiff
Red Hat:rhel_aus:8.6::appstream
 before 0:4.0.9-21.el8_6.3
0:4.0.9-21.el8_6.3
libtiff
Red Hat:rhel_eus_long_life:8.6::appstream
 before 0:4.0.9-21.el8_6.3
0:4.0.9-21.el8_6.3
libtiff
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.0.9-29.el8_8.3
0:4.0.9-29.el8_8.3
libtiff
Red Hat:rhel_tus:8.8::appstream
 before 0:4.0.9-29.el8_8.3
0:4.0.9-29.el8_8.3
libtiff
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.4.0-8.el9_2.6
0:4.4.0-8.el9_2.6
libtiff
Red Hat:rhel_e4s:9.4::appstream
 before 0:4.4.0-12.el9_4.6
0:4.4.0-12.el9_4.6
compat-libtiff3
Red Hat:rhel_els:7
 before 0:3.9.4-12.el7_9.3
0:3.9.4-12.el7_9.3
libtiff
Red Hat:rhel_aus:8.4::appstream
 before 0:4.0.9-18.el8_4.3
0:4.0.9-18.el8_4.3
libtiff-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:4.0.9-18.el8_4.3
0:4.0.9-18.el8_4.3
libtiff-debugsource
Red Hat:rhel_aus:8.4::appstream
 before 0:4.0.9-18.el8_4.3
0:4.0.9-18.el8_4.3
libtiff-devel
Red Hat:rhel_aus:8.4::appstream
 before 0:4.0.9-18.el8_4.3
0:4.0.9-18.el8_4.3
libtiff-tools-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:4.0.9-18.el8_4.3
0:4.0.9-18.el8_4.3
libtiff
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:4.0.9-18.el8_4.3
0:4.0.9-18.el8_4.3
libtiff-debuginfo
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:4.0.9-18.el8_4.3
0:4.0.9-18.el8_4.3
libtiff-debugsource
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:4.0.9-18.el8_4.3
0:4.0.9-18.el8_4.3
libtiff-devel
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:4.0.9-18.el8_4.3
0:4.0.9-18.el8_4.3
libtiff-tools-debuginfo
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:4.0.9-18.el8_4.3
0:4.0.9-18.el8_4.3
libtiff
Red Hat:rhel_els:7
 before 0:4.0.3-35.el7_9.3
0:4.0.3-35.el7_9.3
libtiff-debuginfo
Red Hat:rhel_els:7
 before 0:4.0.3-35.el7_9.3
0:4.0.3-35.el7_9.3
libtiff-devel
Red Hat:rhel_els:7
 before 0:4.0.3-35.el7_9.3
0:4.0.3-35.el7_9.3
libtiff-static
Red Hat:rhel_els:7
 before 0:4.0.3-35.el7_9.3
0:4.0.3-35.el7_9.3
libtiff-tools
Red Hat:rhel_els:7
 before 0:4.0.3-35.el7_9.3
0:4.0.3-35.el7_9.3
libtiff
Rocky Linux:10
From an advisory covering 2 CVEs
 before 0:4.6.0-8.el10_2.4
0:4.6.0-8.el10_2.4
libtiff
Rocky Linux:9
 before 0:4.4.0-18.el9_8.1
0:4.4.0-18.el9_8.1
compat-libtiff3
Rocky Linux:8
 before 0:3.9.4-16.el8_10
0:3.9.4-16.el8_10
libtiff
Rocky Linux:8
 before 0:4.0.9-38.el8_10
0:4.0.9-38.el8_10
tiff
Root:Debian:11
 before 4.2.0-1+deb11u8.aikido.17
4.2.0-1+deb11u8.aikido.174.2.0-1+deb11u8.aikido.194.2.0-1+deb11u8.aikido.184.2.0-1+deb11u8.root.io.164.2.0-1+deb11u8.aikido.20
rootio-tiff
Root:Debian:11
 before 4.2.0-1+deb11u8.aikido.17
4.2.0-1+deb11u8.aikido.174.2.0-1+deb11u8.aikido.194.2.0-1+deb11u8.aikido.184.2.0-1+deb11u8.root.io.164.2.0-1+deb11u8.aikido.20
tiff
Root:Debian:12
 before 4.5.0-6+deb12u4.aikido.20
4.5.0-6+deb12u4.aikido.204.5.0-6+deb12u4.root.io.194.5.0-6+deb12u4.aikido.214.5.0-6+deb12u4.aikido.22
rootio-tiff
Root:Debian:12
 before 4.5.0-6+deb12u4.aikido.20
4.5.0-6+deb12u4.aikido.204.5.0-6+deb12u4.root.io.194.5.0-6+deb12u4.aikido.214.5.0-6+deb12u4.aikido.22
tiff
SUSE:Linux Micro 6.2
From an advisory covering 3 CVEs
 before 4.7.2-160000.1.1
4.7.2-160000.1.1
tiff
SUSE:Linux Enterprise Server 16.0
From an advisory covering 3 CVEs
 before 4.7.2-160000.1.1
4.7.2-160000.1.1
tiff
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 3 CVEs
 before 4.7.2-160000.1.1
4.7.2-160000.1.1
tiff
SUSE:Linux Micro 6.0
From an advisory covering 2 CVEs
 before 4.7.2-1.1
4.7.2-1.1
tiff
SUSE:Linux Micro 6.1
From an advisory covering 2 CVEs
 before 4.7.2-slfo.1.1_1.1
4.7.2-slfo.1.1_1.1
tiff
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 3 CVEs
 before 4.7.2-150600.3.29.1
4.7.2-150600.3.29.1
tiff
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 3 CVEs
 before 4.7.2-150600.3.29.1
4.7.2-150600.3.29.1
tiff
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 3 CVEs
 before 4.7.2-150600.3.29.1
4.7.2-150600.3.29.1
tiff
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 3 CVEs
 before 4.7.2-150600.3.29.1
4.7.2-150600.3.29.1
tiff
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 2 CVEs
 before 4.0.9-44.115.1
4.0.9-44.115.1
tiff
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 2 CVEs
 before 4.0.9-44.115.1
4.0.9-44.115.1
tiff
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 2 CVEs
 before 4.0.9-150000.45.69.1
4.0.9-150000.45.69.1
tiff
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 2 CVEs
 before 4.0.9-150000.45.69.1
4.0.9-150000.45.69.1
tiff
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 2 CVEs
 before 4.0.9-150000.45.69.1
4.0.9-150000.45.69.1
tiff
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 2 CVEs
 before 4.0.9-150000.45.69.1
4.0.9-150000.45.69.1
tiff
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
 before 4.0.9-150000.45.69.1
4.0.9-150000.45.69.1
tiff
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 4.0.9-150000.45.69.1
4.0.9-150000.45.69.1
tiff
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 2 CVEs
 before 4.0.9-150000.45.69.1
4.0.9-150000.45.69.1
tiff
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 4.0.9-150000.45.69.1
4.0.9-150000.45.69.1
tiff
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 4.0.9-150000.45.69.1
4.0.9-150000.45.69.1
tiff
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 4.0.9-150000.45.69.1
4.0.9-150000.45.69.1
tiff
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 2 CVEs
 before 4.0.9-150000.45.69.1
4.0.9-150000.45.69.1
tiff
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
 before 4.0.9-150000.45.69.1
4.0.9-150000.45.69.1
tiff
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 2 CVEs
 before 4.0.9-150000.45.69.1
4.0.9-150000.45.69.1
tiff
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 2 CVEs
 before 4.0.9-150000.45.69.1
4.0.9-150000.45.69.1
gdal
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1.9.0-3.1ubuntu41.9.0-3.1ubuntu61.10.1+dfsg-21.10.1+dfsg-2build11.10.1+dfsg-3
Show 8 moreShow less
1.10.1+dfsg-3build11.10.1+dfsg-3build21.10.1+dfsg-3ubuntu11.10.1+dfsg-3ubuntu21.10.1+dfsg-5ubuntu11.10.1+dfsg-5ubuntu1+esm11.10.1+dfsg-5ubuntu1+esm21.10.1+dfsg-5ubuntu1+esm3
 None known
tiff
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.0.2-4ubuntu34.0.3-5ubuntu14.0.3-64.0.3-6ubuntu14.0.3-7
Show 27 moreShow less
4.0.3-7ubuntu0.14.0.3-7ubuntu0.24.0.3-7ubuntu0.34.0.3-7ubuntu0.44.0.3-7ubuntu0.64.0.3-7ubuntu0.74.0.3-7ubuntu0.84.0.3-7ubuntu0.94.0.3-7ubuntu0.104.0.3-7ubuntu0.114.0.3-7ubuntu0.11+esm14.0.3-7ubuntu0.11+esm24.0.3-7ubuntu0.11+esm34.0.3-7ubuntu0.11+esm44.0.3-7ubuntu0.11+esm54.0.3-7ubuntu0.11+esm64.0.3-7ubuntu0.11+esm74.0.3-7ubuntu0.11+esm84.0.3-7ubuntu0.11+esm94.0.3-7ubuntu0.11+esm104.0.3-7ubuntu0.11+esm114.0.3-7ubuntu0.11+esm124.0.3-7ubuntu0.11+esm134.0.3-7ubuntu0.11+esm144.0.3-7ubuntu0.11+esm154.0.3-7ubuntu0.11+esm164.0.3-7ubuntu0.11+esm17
 None known
tiff
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.0.3-12.3ubuntu24.0.5-14.0.6-14.0.6-1ubuntu0.14.0.6-1ubuntu0.2
Show 25 moreShow less
4.0.6-1ubuntu0.34.0.6-1ubuntu0.44.0.6-1ubuntu0.54.0.6-1ubuntu0.64.0.6-1ubuntu0.74.0.6-1ubuntu0.84.0.6-1ubuntu0.8+esm14.0.6-1ubuntu0.8+esm24.0.6-1ubuntu0.8+esm34.0.6-1ubuntu0.8+esm44.0.6-1ubuntu0.8+esm64.0.6-1ubuntu0.8+esm74.0.6-1ubuntu0.8+esm84.0.6-1ubuntu0.8+esm94.0.6-1ubuntu0.8+esm104.0.6-1ubuntu0.8+esm114.0.6-1ubuntu0.8+esm124.0.6-1ubuntu0.8+esm134.0.6-1ubuntu0.8+esm144.0.6-1ubuntu0.8+esm154.0.6-1ubuntu0.8+esm164.0.6-1ubuntu0.8+esm174.0.6-1ubuntu0.8+esm184.0.6-1ubuntu0.8+esm194.0.6-1ubuntu0.8+esm20
 None known
gdal
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.11.2+dfsg-3ubuntu31.11.2+dfsg-3ubuntu41.11.3+dfsg-2build11.11.3+dfsg-2build21.11.3+dfsg-2build3
Show 5 moreShow less
1.11.3+dfsg-31.11.3+dfsg-3build11.11.3+dfsg-3build21.11.3+dfsg-3ubuntu0.1~esm11.11.3+dfsg-3ubuntu0.1~esm2
 None known
tiff
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.0.8-54.0.8-64.0.9-14.0.9-24.0.9-3
Show 23 moreShow less
4.0.9-44.0.9-4ubuntu14.0.9-54.0.9-5ubuntu0.14.0.9-5ubuntu0.24.0.9-5ubuntu0.34.0.9-5ubuntu0.44.0.9-5ubuntu0.54.0.9-5ubuntu0.64.0.9-5ubuntu0.74.0.9-5ubuntu0.84.0.9-5ubuntu0.94.0.9-5ubuntu0.104.0.9-5ubuntu0.10+esm14.0.9-5ubuntu0.10+esm24.0.9-5ubuntu0.10+esm34.0.9-5ubuntu0.10+esm44.0.9-5ubuntu0.10+esm54.0.9-5ubuntu0.10+esm64.0.9-5ubuntu0.10+esm74.0.9-5ubuntu0.10+esm84.0.9-5ubuntu0.10+esm94.0.9-5ubuntu0.10+esm10
 None known
neuron
Ubuntu:18.04:LTS
 All versions, plus listed versions
7.5-1
 None known
qtwebengine-opensource-src
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.9.1+dfsg-45.9.1+dfsg-4ubuntu15.9.2+dfsg-2ubuntu15.9.3+dfsg-0ubuntu15.9.4+dfsg-0ubuntu15.9.5+dfsg-0ubuntu25.9.5+dfsg-0ubuntu2+esm1
 None known
texmaker
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.5-15.0.2-15.0.2-1build15.0.2-1build25.0.2-1ubuntu0.1~esm1
 None known
tiff
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
4.0.10+git191003-14.1.0+git191117-14.1.0+git191117-24.1.0+git191117-2build14.1.0+git191117-2ubuntu0.20.04.1
Show 16 moreShow less
4.1.0+git191117-2ubuntu0.20.04.24.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.44.1.0+git191117-2ubuntu0.20.04.54.1.0+git191117-2ubuntu0.20.04.64.1.0+git191117-2ubuntu0.20.04.74.1.0+git191117-2ubuntu0.20.04.84.1.0+git191117-2ubuntu0.20.04.94.1.0+git191117-2ubuntu0.20.04.104.1.0+git191117-2ubuntu0.20.04.114.1.0+git191117-2ubuntu0.20.04.124.1.0+git191117-2ubuntu0.20.04.134.1.0+git191117-2ubuntu0.20.04.144.1.0+git191117-2ubuntu0.20.04.14+esm14.1.0+git191117-2ubuntu0.20.04.14+esm24.1.0+git191117-2ubuntu0.20.04.14+esm3
 None known
neuron
Ubuntu:20.04:LTS
 All versions, plus listed versions
7.6.3-1build27.6.3-1build37.6.3-1build4
 None known
qtwebengine-opensource-src
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.12.4+dfsg-1ubuntu15.12.4+dfsg-1ubuntu35.12.5+dfsg-3ubuntu15.12.5+dfsg-6ubuntu25.12.5+dfsg-7
Show 4 moreShow less
5.12.5+dfsg-7build15.12.8+dfsg-0ubuntu15.12.8+dfsg-0ubuntu1.15.12.8+dfsg-0ubuntu1.1+esm1
 None known
texmaker
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.0.3-1build25.0.3-1build35.0.3-1build45.0.3-1build55.0.3-1ubuntu0.20.04.1~esm1
 None known
neuron
Ubuntu:22.04:LTS
 All versions, plus listed versions
7.6.3-1build57.6.3-1build6
 None known
tiff
Ubuntu:22.04:LTS
 All versions, plus listed versions
4.3.0-14.3.0-24.3.0-34.3.0-3build14.3.0-4
Show 15 moreShow less
4.3.0-54.3.0-64.3.0-6ubuntu0.14.3.0-6ubuntu0.24.3.0-6ubuntu0.34.3.0-6ubuntu0.44.3.0-6ubuntu0.54.3.0-6ubuntu0.64.3.0-6ubuntu0.74.3.0-6ubuntu0.84.3.0-6ubuntu0.94.3.0-6ubuntu0.104.3.0-6ubuntu0.114.3.0-6ubuntu0.124.3.0-6ubuntu0.13
 None known
qtwebengine-opensource-src
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
5.15.6+dfsg-15.15.6+dfsg-25.15.7+dfsg-25.15.8+dfsg-15.15.8+dfsg-1build1
Show 4 moreShow less
5.15.8+dfsg-1build25.15.8+dfsg-25.15.9+dfsg-15.15.9+dfsg-1ubuntu0.1~esm1
 None known
texmaker
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
5.0.3-1build85.0.3-1build95.0.3-1ubuntu0.22.04.1~esm1
 None known
tiff
Ubuntu:24.04:LTS
 All versions, plus listed versions
4.5.1+git230720-1ubuntu14.5.1+git230720-3ubuntu14.5.1+git230720-4ubuntu14.5.1+git230720-4ubuntu24.5.1+git230720-4ubuntu2.1
Show 4 moreShow less
4.5.1+git230720-4ubuntu2.24.5.1+git230720-4ubuntu2.34.5.1+git230720-4ubuntu2.44.5.1+git230720-4ubuntu2.5
 None known
qtwebengine-opensource-src
Ubuntu:Pro:24.04:LTS
 All versions, plus listed versions
5.15.15+dfsg-25.15.15+dfsg-2build25.15.15+dfsg-2ubuntu15.15.16+dfsg-15.15.16+dfsg-1ubuntu25.15.16+dfsg-1ubuntu45.15.16+dfsg-35.15.16+dfsg-3ubuntu0.1~esm1
 None known
texmaker
Ubuntu:Pro:24.04:LTS
 All versions, plus listed versions
5.1.3+dfsg-1build45.1.3+dfsg-1build55.1.3+dfsg-1build65.1.3+dfsg-1build75.1.3+dfsg-1build85.1.3+dfsg-1ubuntu0.1~esm1
 None known
qtwebengine-opensource-src
Ubuntu:25.10
 All versions, plus listed versions
5.15.18+dfsg-25.15.18+dfsg-2build15.15.19+dfsg-15.15.19+dfsg2-1
 None known
texmaker
Ubuntu:25.10
 All versions, plus listed versions
5.1.3+dfsg-35.1.3+dfsg-3build1
 None known
tiff
Ubuntu:25.10
 All versions, plus listed versions
4.5.1+git230720-4ubuntu44.7.0-3ubuntu14.7.0-3ubuntu24.7.0-3ubuntu34.7.0-3ubuntu3.1
 None known
qtwebengine-opensource-src
Ubuntu:26.10
 All versions, plus listed versions
5.15.19+dfsg2-45.15.19+dfsg2-65.15.19+dfsg2-7
 None known
tiff
Ubuntu:26.10
 All versions, plus listed versions
4.7.0-3ubuntu44.7.1-2ubuntu1
 None known
tiff
Ubuntu:26.04:LTS
 All versions, plus listed versions
4.7.0-3ubuntu34.7.0-3ubuntu44.7.0-3ubuntu5
 None known
qtwebengine-opensource-src
Ubuntu:Pro:26.04:LTS
 All versions, plus listed versions
5.15.19+dfsg2-15.15.19+dfsg2-1build15.15.19+dfsg2-25.15.19+dfsg2-35.15.19+dfsg2-45.15.19+dfsg2-4ubuntu0.1~esm1
 None known
tiff
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 4.7.2-1.1
4.7.2-1.1
tiff
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
 before 4.7.2-160000.1.1
4.7.2-160000.1.1
tiff-man
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
 before 4.7.2-160000.1.1
4.7.2-160000.1.1

History

History
RecordedChangedSources
affectedEUVD, NVD, OSV
factsCVE List
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-12912 is a high vulnerability (CVSS 7.3) in Red Hat Enterprise Linux 10, published June 29, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in libtiff 4.4.0-18.el9_8.1.

References

Show 90 moreShow less
This page doesn't list everything

Left out here: the rest of 6 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 2 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open