Every CVE Search/ Get API key

CVE-2026-4775

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

7.8 HighFix available

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.57%Up 0.5 points since Mar 25, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.8

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

Record
CVE-2026-4775
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-190, CWE-190
Updated
2026-11-04
EUVDEUVD-2026-14901 7.8

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

Record
EUVD-2026-14901
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-05
GitHub AdvisoriesGHSA-cm99-m826-vgg7 7.8

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer...

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

Record
GHSA-cm99-m826-vgg7
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-190
Updated
2026-11-02
NVD 7.8

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

Record
CVE-2026-4775
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-190
Updated
2026-11-05
OSVALPINE-CVE-2026-4775 7.8

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

Record
ALPINE-CVE-2026-4775
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVBELL-CVE-2026-4775 7.8
Record
BELL-CVE-2026-4775
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 48 moreShow less
OSV 7.8

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

Record
CVE-2026-4775
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-190
Updated
2026-11-05
OSVDEBIAN-CVE-2026-4775 7.8

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

Record
DEBIAN-CVE-2026-4775
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-05
OSVOESA-2026-1806 7.8

libtiff security update

This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.

Security Fix(es):

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.(CVE-2026-4775)

Record
OESA-2026-1806
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:12265 7.8

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:12265
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:12271 7.8

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:12271
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:14929 7.8

Red Hat Security Advisory: mingw-libtiff security update

Record
RHSA-2026:14929
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:16055 7.8

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:16055
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:19150 7.8

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:19150
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:19363 7.8

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:19363
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:19585 7.8

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:19585
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:19586 7.8

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:19586
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:19604 7.8

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:19604
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:19608 7.8

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:19608
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:19609 7.8

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:19609
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:19657 7.8

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:19657
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:19659 7.8

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:19659
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:19702 7.8

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:19702
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:20583 7.8

Red Hat Security Advisory: compat-libtiff3 security update

Record
RHSA-2026:20583
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:20585 7.8

Red Hat Security Advisory: compat-libtiff3 security update

Record
RHSA-2026:20585
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:20591 7.8

Red Hat Security Advisory: compat-libtiff3 security update

Record
RHSA-2026:20591
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:20592 7.8

Red Hat Security Advisory: compat-libtiff3 security update

Record
RHSA-2026:20592
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:24992 7.8

Red Hat Security Advisory: compat-libtiff3 security update

Record
RHSA-2026:24992
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:25910 7.8

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:25910
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:30349 7.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:30349
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:33388 7.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:33388
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:12265 7.8

Important: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:12265
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:12271 7.8

Important: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:12271
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:14929 7.8

Important: mingw-libtiff security update

The libtiff package contains a library of functions for manipulating TIFF (Tagged Image File Format) image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if you need to manipulate TIFF format image files.

Security Fix(es):

  • libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:14929
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:16055 7.8

Important: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:16055
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:19150 7.8

Important: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:19150
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:19363 7.8

Important: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:19363
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:20585 7.8

Important: compat-libtiff3 security update

The libtiff3 package provides libtiff 3, an older version of libtiff library for manipulating TIFF (Tagged Image File Format) image format files. This version should be used only if you are unable to use the current version of libtiff.

Security Fix(es):

  • libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:20585
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-ALPINE-320-CVE-2026-4775 7.8

CVE-2026-4775 in tiff - Patched by Root

Root has patched CVE-2026-4775 in the tiff package for Root:Alpine:3.20. Multiple fixed versions available.

Record
ROOT-OS-ALPINE-320-CVE-2026-4775
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-ALPINE-321-CVE-2026-4775 7.8

CVE-2026-4775 in tiff - Patched by Root

Root has patched CVE-2026-4775 in the tiff package for Root:Alpine:3.21. Multiple fixed versions available.

Record
ROOT-OS-ALPINE-321-CVE-2026-4775
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-ALPINE-322-CVE-2026-4775 7.8

CVE-2026-4775 in tiff - Patched by Root

Root has patched CVE-2026-4775 in the tiff package for Root:Alpine:3.22. Multiple fixed versions available.

Record
ROOT-OS-ALPINE-322-CVE-2026-4775
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-ALPINE-323-CVE-2026-4775 7.8

CVE-2026-4775 in tiff - Patched by Root

Root has patched CVE-2026-4775 in the tiff package for Root:Alpine:3.23. Multiple fixed versions available.

Record
ROOT-OS-ALPINE-323-CVE-2026-4775
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-ALPINE-324-CVE-2026-4775 7.8

CVE-2026-4775 in tiff - Patched by Root

Root has patched CVE-2026-4775 in the tiff package for Root:Alpine:3.24. Multiple fixed versions available.

Record
ROOT-OS-ALPINE-324-CVE-2026-4775
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-4775 7.8

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

Record
UBUNTU-CVE-2026-4775
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:12265 No score

Important: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:12265
Updated
2026-11-02
OSVALSA-2026:12271 No score

Important: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:12271
Updated
2026-11-02
OSVALSA-2026:14929 No score

Important: mingw-libtiff security update

The libtiff package contains a library of functions for manipulating TIFF (Tagged Image File Format) image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if you need to manipulate TIFF format image files.

Security Fix(es):

  • libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:14929
Updated
2026-11-02
OSVALSA-2026:16055 No score

Important: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:16055
Updated
2026-11-02
OSVALSA-2026:19150 No score

Important: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:19150
Updated
2026-11-02
OSVALSA-2026:19363 No score

Important: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:19363
Updated
2026-11-02
OSVALSA-2026:20585 No score

Important: compat-libtiff3 security update

The libtiff3 package provides libtiff 3, an older version of libtiff library for manipulating TIFF (Tagged Image File Format) image format files. This version should be used only if you are unable to use the current version of libtiff.

Security Fix(es):

  • libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:20585
Updated
2026-11-02
OSVAZL-80843 No score

CVE-2026-4775 affecting package openjpeg2 2.3.1-12

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

Record
AZL-80843
Updated
2026-11-05
OSVAZL-80919 No score

CVE-2026-4775 affecting package libtiff for versions less than 4.6.0-13

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

Record
AZL-80919
Updated
2026-11-05
OSVCLSA-2026-1778090588 No score

libtiff: Fix of CVE-2026-4775

  • CVE-2026-4775: fix signed integer overflow in YCbCr tile decoder helpers in TIFFReadRGBAImage() that could lead to heap overflow on crafted images with huge width
Record
CLSA-2026-1778090588
Updated
2026-11-02

Affected products

Show 22 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
qt6-qtwebengine
Alpine:v3.23
 before 6.10.3-r3
6.10.3-r3
qt6-qtwebengine
Alpine:v3.24
 before 6.11.0-r9
6.11.0-r9
tiff
Alpine:v3.21
 before 4.7.2-r0
4.7.2-r0
tiff
Alpine:v3.22
 before 4.7.2-r0
4.7.2-r0
tiff
Alpine:v3.23
 before 4.7.2-r0
4.7.2-r0
tiff
Alpine:v3.24
 before 4.7.2-r0
4.7.2-r0
libtiff
AlmaLinux:10
 before 4.6.0-6.el10_1.3
4.6.0-6.el10_1.3
libtiff-devel
AlmaLinux:10
 before 4.6.0-6.el10_1.3
4.6.0-6.el10_1.3
libtiff-tools
AlmaLinux:10
 before 4.6.0-6.el10_1.3
4.6.0-6.el10_1.3
libtiff
AlmaLinux:9
 before 4.4.0-15.el9_7.3
4.4.0-15.el9_7.3
Show 252 moreShow less
Affected packages
PackageAffectedFixed
libtiff-devel
AlmaLinux:9
 before 4.4.0-15.el9_7.3
4.4.0-15.el9_7.3
libtiff-tools
AlmaLinux:9
 before 4.4.0-15.el9_7.3
4.4.0-15.el9_7.3
mingw32-libtiff
AlmaLinux:8
 before 4.0.9-4.el8_10
4.0.9-4.el8_10
mingw32-libtiff-static
AlmaLinux:8
 before 4.0.9-4.el8_10
4.0.9-4.el8_10
mingw64-libtiff
AlmaLinux:8
 before 4.0.9-4.el8_10
4.0.9-4.el8_10
mingw64-libtiff-static
AlmaLinux:8
 before 4.0.9-4.el8_10
4.0.9-4.el8_10
libtiff
AlmaLinux:8
 before 4.0.9-37.el8_10
4.0.9-37.el8_10
libtiff-devel
AlmaLinux:8
 before 4.0.9-37.el8_10
4.0.9-37.el8_10
libtiff-tools
AlmaLinux:8
 before 4.0.9-37.el8_10
4.0.9-37.el8_10
libtiff
AlmaLinux:10
 before 4.6.0-8.el10_2.1
4.6.0-8.el10_2.1
libtiff-devel
AlmaLinux:10
 before 4.6.0-8.el10_2.1
4.6.0-8.el10_2.1
libtiff-tools
AlmaLinux:10
 before 4.6.0-8.el10_2.1
4.6.0-8.el10_2.1
libtiff
AlmaLinux:9
 before 4.4.0-18.el9_8
4.4.0-18.el9_8
libtiff-devel
AlmaLinux:9
 before 4.4.0-18.el9_8
4.4.0-18.el9_8
libtiff-tools
AlmaLinux:9
 before 4.4.0-18.el9_8
4.4.0-18.el9_8
compat-libtiff3
AlmaLinux:8
 before 3.9.4-15.el8_10
3.9.4-15.el8_10
openjpeg2
Azure Linux:3
 through 2.3.1-12 None known
libtiff
Azure Linux:3
 before 4.6.0-13
4.6.0-13
tiff
Alpaquita:25
 4.7.0-r0 up to 4.7.2-r0
4.7.2-r0
tiff
Alpaquita:stream
 4.4.0-r1 up to 4.7.2-r0
4.7.2-r0
tiff
BellSoft Hardened Containers:25
 4.7.0-r0 up to 4.7.2-r0
4.7.2-r0
tiff
BellSoft Hardened Containers:stream
 4.4.0-r1 up to 4.7.2-r0
4.7.2-r0
libtiff
TuxCare:AlmaLinux:9.6
 before 4.4.0-13.el9_6.2.tuxcare.els7
4.4.0-13.el9_6.2.tuxcare.els7
libtiff-devel
TuxCare:AlmaLinux:9.6
 before 4.4.0-13.el9_6.2.tuxcare.els7
4.4.0-13.el9_6.2.tuxcare.els7
libtiff-static
TuxCare:AlmaLinux:9.6
 before 4.4.0-13.el9_6.2.tuxcare.els7
4.4.0-13.el9_6.2.tuxcare.els7
libtiff-tools
TuxCare:AlmaLinux:9.6
 before 4.4.0-13.el9_6.2.tuxcare.els7
4.4.0-13.el9_6.2.tuxcare.els7
libtiff
TuxCare:AlmaLinux:9.2
 before 4.4.0-8.el9_2.tuxcare.els12
4.4.0-8.el9_2.tuxcare.els12
libtiff-devel
TuxCare:AlmaLinux:9.2
 before 4.4.0-8.el9_2.tuxcare.els12
4.4.0-8.el9_2.tuxcare.els12
libtiff-static
TuxCare:AlmaLinux:9.2
 before 4.4.0-8.el9_2.tuxcare.els12
4.4.0-8.el9_2.tuxcare.els12
libtiff-tools
TuxCare:AlmaLinux:9.2
 before 4.4.0-8.el9_2.tuxcare.els12
4.4.0-8.el9_2.tuxcare.els12
libtiff
TuxCare:CentOS:7
 before 4.0.3-35.el7.tuxcare.els9
4.0.3-35.el7.tuxcare.els9
libtiff-devel
TuxCare:CentOS:7
 before 4.0.3-35.el7.tuxcare.els9
4.0.3-35.el7.tuxcare.els9
libtiff-static
TuxCare:CentOS:7
 before 4.0.3-35.el7.tuxcare.els9
4.0.3-35.el7.tuxcare.els9
libtiff-tools
TuxCare:CentOS:7
 before 4.0.3-35.el7.tuxcare.els9
4.0.3-35.el7.tuxcare.els9
libtiff
TuxCare:OracleLinux:7
 before 4.0.3-35.el7.tuxcare.els9
4.0.3-35.el7.tuxcare.els9
libtiff-devel
TuxCare:OracleLinux:7
 before 4.0.3-35.el7.tuxcare.els9
4.0.3-35.el7.tuxcare.els9
libtiff-static
TuxCare:OracleLinux:7
 before 4.0.3-35.el7.tuxcare.els9
4.0.3-35.el7.tuxcare.els9
libtiff-tools
TuxCare:OracleLinux:7
 before 4.0.3-35.el7.tuxcare.els9
4.0.3-35.el7.tuxcare.els9
tiff
Debian:12
 before 4.5.0-6+deb12u4, plus listed versions
4.5.0-64.5.0-6+deb12u14.5.0-6+deb12u24.5.0-6+deb12u3
4.5.0-6+deb12u4
tiff
Debian:13
 before 4.7.0-3+deb13u2, plus listed versions
4.7.0-34.7.0-3+deb13u1
4.7.0-3+deb13u2
tiff
Debian:14
 before 4.7.1-2, plus listed versions
4.7.0-34.7.0-44.7.0-54.7.1-1
4.7.1-2
libtiff
Mageia:9
 before 4.5.1-1.8.mga9
4.5.1-1.8.mga9
libtiff
openEuler:24.03-LTS-SP3
 before 4.6.0-7.oe2403sp3
4.6.0-7.oe2403sp3
libtiff
openEuler:20.03-LTS-SP4
 before 4.3.0-36.oe2003sp4
4.3.0-36.oe2003sp4
libtiff
openEuler:22.03-LTS-SP4
 before 4.3.0-50.oe2203sp4
4.3.0-50.oe2203sp4
libtiff
openEuler:24.03-LTS
 before 4.6.0-7.oe2403sp2
4.6.0-7.oe2403sp2
libtiff
openEuler:24.03-LTS-SP1
 before 4.6.0-7.oe2403sp1
4.6.0-7.oe2403sp1
libtiff
openEuler:24.03-LTS-SP2
 before 4.6.0-7.oe2403sp2
4.6.0-7.oe2403sp2
libtiff
Red Hat:enterprise_linux:10.1
 before 0:4.6.0-6.el10_1.3
0:4.6.0-6.el10_1.3
libtiff-debuginfo
Red Hat:enterprise_linux:10.1
 before 0:4.6.0-6.el10_1.3
0:4.6.0-6.el10_1.3
libtiff-debugsource
Red Hat:enterprise_linux:10.1
 before 0:4.6.0-6.el10_1.3
0:4.6.0-6.el10_1.3
libtiff-devel
Red Hat:enterprise_linux:10.1
 before 0:4.6.0-6.el10_1.3
0:4.6.0-6.el10_1.3
libtiff-tools-debuginfo
Red Hat:enterprise_linux:10.1
 before 0:4.6.0-6.el10_1.3
0:4.6.0-6.el10_1.3
libtiff-tools
Red Hat:enterprise_linux:10.1
 before 0:4.6.0-6.el10_1.3
0:4.6.0-6.el10_1.3
libtiff
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-15.el9_7.3
0:4.4.0-15.el9_7.3
libtiff-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-15.el9_7.3
0:4.4.0-15.el9_7.3
libtiff-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-15.el9_7.3
0:4.4.0-15.el9_7.3
libtiff-devel
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-15.el9_7.3
0:4.4.0-15.el9_7.3
libtiff-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-15.el9_7.3
0:4.4.0-15.el9_7.3
libtiff-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:4.4.0-15.el9_7.3
0:4.4.0-15.el9_7.3
libtiff-debugsource
Red Hat:enterprise_linux:9::crb
 before 0:4.4.0-15.el9_7.3
0:4.4.0-15.el9_7.3
libtiff-tools
Red Hat:enterprise_linux:9::crb
 before 0:4.4.0-15.el9_7.3
0:4.4.0-15.el9_7.3
libtiff-tools-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:4.4.0-15.el9_7.3
0:4.4.0-15.el9_7.3
mingw-libtiff
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-4.el8_10
0:4.0.9-4.el8_10
mingw32-libtiff
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-4.el8_10
0:4.0.9-4.el8_10
mingw32-libtiff-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-4.el8_10
0:4.0.9-4.el8_10
mingw32-libtiff-static
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-4.el8_10
0:4.0.9-4.el8_10
mingw64-libtiff
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-4.el8_10
0:4.0.9-4.el8_10
mingw64-libtiff-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-4.el8_10
0:4.0.9-4.el8_10
mingw64-libtiff-static
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-4.el8_10
0:4.0.9-4.el8_10
libtiff
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-37.el8_10
0:4.0.9-37.el8_10
libtiff-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-37.el8_10
0:4.0.9-37.el8_10
libtiff-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-37.el8_10
0:4.0.9-37.el8_10
libtiff-devel
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-37.el8_10
0:4.0.9-37.el8_10
libtiff-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-37.el8_10
0:4.0.9-37.el8_10
libtiff-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-37.el8_10
0:4.0.9-37.el8_10
libtiff-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-37.el8_10
0:4.0.9-37.el8_10
libtiff-tools
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-37.el8_10
0:4.0.9-37.el8_10
libtiff-tools-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-37.el8_10
0:4.0.9-37.el8_10
libtiff
Red Hat:enterprise_linux:10.2
 before 0:4.6.0-8.el10_2.1
0:4.6.0-8.el10_2.1
libtiff-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:4.6.0-8.el10_2.1
0:4.6.0-8.el10_2.1
libtiff-debugsource
Red Hat:enterprise_linux:10.2
 before 0:4.6.0-8.el10_2.1
0:4.6.0-8.el10_2.1
libtiff-devel
Red Hat:enterprise_linux:10.2
 before 0:4.6.0-8.el10_2.1
0:4.6.0-8.el10_2.1
libtiff-tools-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:4.6.0-8.el10_2.1
0:4.6.0-8.el10_2.1
libtiff-tools
Red Hat:enterprise_linux:10.2
 before 0:4.6.0-8.el10_2.1
0:4.6.0-8.el10_2.1
libtiff
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-18.el9_8
0:4.4.0-18.el9_8
libtiff-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-18.el9_8
0:4.4.0-18.el9_8
libtiff-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-18.el9_8
0:4.4.0-18.el9_8
libtiff-devel
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-18.el9_8
0:4.4.0-18.el9_8
libtiff-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-18.el9_8
0:4.4.0-18.el9_8
libtiff-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:4.4.0-18.el9_8
0:4.4.0-18.el9_8
libtiff-debugsource
Red Hat:enterprise_linux:9::crb
 before 0:4.4.0-18.el9_8
0:4.4.0-18.el9_8
libtiff-tools
Red Hat:enterprise_linux:9::crb
 before 0:4.4.0-18.el9_8
0:4.4.0-18.el9_8
libtiff-tools-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:4.4.0-18.el9_8
0:4.4.0-18.el9_8
libtiff
Red Hat:rhel_eus:9.6::appstream
 before 0:4.4.0-13.el9_6.4
0:4.4.0-13.el9_6.4
libtiff-debuginfo
Red Hat:rhel_eus:9.6::appstream
 before 0:4.4.0-13.el9_6.4
0:4.4.0-13.el9_6.4
libtiff-debugsource
Red Hat:rhel_eus:9.6::appstream
 before 0:4.4.0-13.el9_6.4
0:4.4.0-13.el9_6.4
libtiff-devel
Red Hat:rhel_eus:9.6::appstream
 before 0:4.4.0-13.el9_6.4
0:4.4.0-13.el9_6.4
libtiff-tools-debuginfo
Red Hat:rhel_eus:9.6::appstream
 before 0:4.4.0-13.el9_6.4
0:4.4.0-13.el9_6.4
libtiff-debuginfo
Red Hat:rhel_eus:9.6::crb
 before 0:4.4.0-13.el9_6.4
0:4.4.0-13.el9_6.4
libtiff-debugsource
Red Hat:rhel_eus:9.6::crb
 before 0:4.4.0-13.el9_6.4
0:4.4.0-13.el9_6.4
libtiff-tools
Red Hat:rhel_eus:9.6::crb
 before 0:4.4.0-13.el9_6.4
0:4.4.0-13.el9_6.4
libtiff-tools-debuginfo
Red Hat:rhel_eus:9.6::crb
 before 0:4.4.0-13.el9_6.4
0:4.4.0-13.el9_6.4
libtiff
Red Hat:enterprise_linux_eus:10.0
 before 0:4.6.0-6.el10_0.3
0:4.6.0-6.el10_0.3
libtiff-debuginfo
Red Hat:enterprise_linux_eus:10.0
 before 0:4.6.0-6.el10_0.3
0:4.6.0-6.el10_0.3
libtiff-debugsource
Red Hat:enterprise_linux_eus:10.0
 before 0:4.6.0-6.el10_0.3
0:4.6.0-6.el10_0.3
libtiff-devel
Red Hat:enterprise_linux_eus:10.0
 before 0:4.6.0-6.el10_0.3
0:4.6.0-6.el10_0.3
libtiff-tools-debuginfo
Red Hat:enterprise_linux_eus:10.0
 before 0:4.6.0-6.el10_0.3
0:4.6.0-6.el10_0.3
libtiff-tools
Red Hat:enterprise_linux_eus:10.0
 before 0:4.6.0-6.el10_0.3
0:4.6.0-6.el10_0.3
libtiff
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.0.9-29.el8_8.2
0:4.0.9-29.el8_8.2
libtiff-debuginfo
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.0.9-29.el8_8.2
0:4.0.9-29.el8_8.2
libtiff-debugsource
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.0.9-29.el8_8.2
0:4.0.9-29.el8_8.2
libtiff-devel
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.0.9-29.el8_8.2
0:4.0.9-29.el8_8.2
libtiff-tools-debuginfo
Red Hat:rhel_e4s:8.8::appstream
 before 0:4.0.9-29.el8_8.2
0:4.0.9-29.el8_8.2
libtiff
Red Hat:rhel_tus:8.8::appstream
 before 0:4.0.9-29.el8_8.2
0:4.0.9-29.el8_8.2
libtiff-debuginfo
Red Hat:rhel_tus:8.8::appstream
 before 0:4.0.9-29.el8_8.2
0:4.0.9-29.el8_8.2
libtiff-debugsource
Red Hat:rhel_tus:8.8::appstream
 before 0:4.0.9-29.el8_8.2
0:4.0.9-29.el8_8.2
libtiff-devel
Red Hat:rhel_tus:8.8::appstream
 before 0:4.0.9-29.el8_8.2
0:4.0.9-29.el8_8.2
libtiff-tools-debuginfo
Red Hat:rhel_tus:8.8::appstream
 before 0:4.0.9-29.el8_8.2
0:4.0.9-29.el8_8.2
libtiff
Red Hat:rhel_e4s:9.0::appstream
 before 0:4.2.0-3.el9_0.3
0:4.2.0-3.el9_0.3
libtiff-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 0:4.2.0-3.el9_0.3
0:4.2.0-3.el9_0.3
libtiff-debugsource
Red Hat:rhel_e4s:9.0::appstream
 before 0:4.2.0-3.el9_0.3
0:4.2.0-3.el9_0.3
libtiff-devel
Red Hat:rhel_e4s:9.0::appstream
 before 0:4.2.0-3.el9_0.3
0:4.2.0-3.el9_0.3
libtiff-tools-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 0:4.2.0-3.el9_0.3
0:4.2.0-3.el9_0.3
libtiff
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.4.0-8.el9_2.5
0:4.4.0-8.el9_2.5
libtiff-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.4.0-8.el9_2.5
0:4.4.0-8.el9_2.5
libtiff-debugsource
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.4.0-8.el9_2.5
0:4.4.0-8.el9_2.5
libtiff-devel
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.4.0-8.el9_2.5
0:4.4.0-8.el9_2.5
libtiff-tools-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:4.4.0-8.el9_2.5
0:4.4.0-8.el9_2.5
libtiff
Red Hat:rhel_aus:8.6::appstream
 before 0:4.0.9-21.el8_6.2
0:4.0.9-21.el8_6.2
libtiff-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:4.0.9-21.el8_6.2
0:4.0.9-21.el8_6.2
libtiff-debugsource
Red Hat:rhel_aus:8.6::appstream
 before 0:4.0.9-21.el8_6.2
0:4.0.9-21.el8_6.2
libtiff-devel
Red Hat:rhel_aus:8.6::appstream
 before 0:4.0.9-21.el8_6.2
0:4.0.9-21.el8_6.2
libtiff-tools-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:4.0.9-21.el8_6.2
0:4.0.9-21.el8_6.2
libtiff
Red Hat:rhel_e4s:8.6::appstream
 before 0:4.0.9-21.el8_6.2
0:4.0.9-21.el8_6.2
libtiff-debuginfo
Red Hat:rhel_e4s:8.6::appstream
 before 0:4.0.9-21.el8_6.2
0:4.0.9-21.el8_6.2
libtiff-debugsource
Red Hat:rhel_e4s:8.6::appstream
 before 0:4.0.9-21.el8_6.2
0:4.0.9-21.el8_6.2
libtiff-devel
Red Hat:rhel_e4s:8.6::appstream
 before 0:4.0.9-21.el8_6.2
0:4.0.9-21.el8_6.2
libtiff-tools-debuginfo
Red Hat:rhel_e4s:8.6::appstream
 before 0:4.0.9-21.el8_6.2
0:4.0.9-21.el8_6.2
libtiff
Red Hat:rhel_tus:8.6::appstream
 before 0:4.0.9-21.el8_6.2
0:4.0.9-21.el8_6.2
libtiff-debuginfo
Red Hat:rhel_tus:8.6::appstream
 before 0:4.0.9-21.el8_6.2
0:4.0.9-21.el8_6.2
libtiff-debugsource
Red Hat:rhel_tus:8.6::appstream
 before 0:4.0.9-21.el8_6.2
0:4.0.9-21.el8_6.2
libtiff-devel
Red Hat:rhel_tus:8.6::appstream
 before 0:4.0.9-21.el8_6.2
0:4.0.9-21.el8_6.2
libtiff-tools-debuginfo
Red Hat:rhel_tus:8.6::appstream
 before 0:4.0.9-21.el8_6.2
0:4.0.9-21.el8_6.2
libtiff
Red Hat:rhel_aus:8.4::appstream
 before 0:4.0.9-18.el8_4.2
0:4.0.9-18.el8_4.2
libtiff-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:4.0.9-18.el8_4.2
0:4.0.9-18.el8_4.2
libtiff-debugsource
Red Hat:rhel_aus:8.4::appstream
 before 0:4.0.9-18.el8_4.2
0:4.0.9-18.el8_4.2
libtiff-devel
Red Hat:rhel_aus:8.4::appstream
 before 0:4.0.9-18.el8_4.2
0:4.0.9-18.el8_4.2
libtiff-tools-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:4.0.9-18.el8_4.2
0:4.0.9-18.el8_4.2
libtiff
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:4.0.9-18.el8_4.2
0:4.0.9-18.el8_4.2
libtiff-debuginfo
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:4.0.9-18.el8_4.2
0:4.0.9-18.el8_4.2
libtiff-debugsource
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:4.0.9-18.el8_4.2
0:4.0.9-18.el8_4.2
libtiff-devel
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:4.0.9-18.el8_4.2
0:4.0.9-18.el8_4.2
libtiff-tools-debuginfo
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:4.0.9-18.el8_4.2
0:4.0.9-18.el8_4.2
libtiff
Red Hat:rhel_eus:9.4::appstream
 before 0:4.4.0-12.el9_4.5
0:4.4.0-12.el9_4.5
libtiff-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 0:4.4.0-12.el9_4.5
0:4.4.0-12.el9_4.5
libtiff-debugsource
Red Hat:rhel_eus:9.4::appstream
 before 0:4.4.0-12.el9_4.5
0:4.4.0-12.el9_4.5
libtiff-devel
Red Hat:rhel_eus:9.4::appstream
 before 0:4.4.0-12.el9_4.5
0:4.4.0-12.el9_4.5
libtiff-tools-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 0:4.4.0-12.el9_4.5
0:4.4.0-12.el9_4.5
libtiff-debuginfo
Red Hat:rhel_eus:9.4::crb
 before 0:4.4.0-12.el9_4.5
0:4.4.0-12.el9_4.5
libtiff-debugsource
Red Hat:rhel_eus:9.4::crb
 before 0:4.4.0-12.el9_4.5
0:4.4.0-12.el9_4.5
libtiff-tools
Red Hat:rhel_eus:9.4::crb
 before 0:4.4.0-12.el9_4.5
0:4.4.0-12.el9_4.5
libtiff-tools-debuginfo
Red Hat:rhel_eus:9.4::crb
 before 0:4.4.0-12.el9_4.5
0:4.4.0-12.el9_4.5
compat-libtiff3
Red Hat:rhel_aus:8.4::appstream
 before 0:3.9.4-13.el8_4.2
0:3.9.4-13.el8_4.2
compat-libtiff3-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:3.9.4-13.el8_4.2
0:3.9.4-13.el8_4.2
compat-libtiff3-debugsource
Red Hat:rhel_aus:8.4::appstream
 before 0:3.9.4-13.el8_4.2
0:3.9.4-13.el8_4.2
compat-libtiff3
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:3.9.4-13.el8_4.2
0:3.9.4-13.el8_4.2
compat-libtiff3-debuginfo
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:3.9.4-13.el8_4.2
0:3.9.4-13.el8_4.2
compat-libtiff3-debugsource
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:3.9.4-13.el8_4.2
0:3.9.4-13.el8_4.2
compat-libtiff3
Red Hat:enterprise_linux:8::appstream
 before 0:3.9.4-15.el8_10
0:3.9.4-15.el8_10
compat-libtiff3-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:3.9.4-15.el8_10
0:3.9.4-15.el8_10
compat-libtiff3-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:3.9.4-15.el8_10
0:3.9.4-15.el8_10
compat-libtiff3
Red Hat:rhel_aus:8.6::appstream
 before 0:3.9.4-13.el8_6.2
0:3.9.4-13.el8_6.2
compat-libtiff3-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:3.9.4-13.el8_6.2
0:3.9.4-13.el8_6.2
compat-libtiff3-debugsource
Red Hat:rhel_aus:8.6::appstream
 before 0:3.9.4-13.el8_6.2
0:3.9.4-13.el8_6.2
compat-libtiff3
Red Hat:rhel_e4s:8.6::appstream
 before 0:3.9.4-13.el8_6.2
0:3.9.4-13.el8_6.2
compat-libtiff3-debuginfo
Red Hat:rhel_e4s:8.6::appstream
 before 0:3.9.4-13.el8_6.2
0:3.9.4-13.el8_6.2
compat-libtiff3-debugsource
Red Hat:rhel_e4s:8.6::appstream
 before 0:3.9.4-13.el8_6.2
0:3.9.4-13.el8_6.2
compat-libtiff3
Red Hat:rhel_tus:8.6::appstream
 before 0:3.9.4-13.el8_6.2
0:3.9.4-13.el8_6.2
compat-libtiff3-debuginfo
Red Hat:rhel_tus:8.6::appstream
 before 0:3.9.4-13.el8_6.2
0:3.9.4-13.el8_6.2
compat-libtiff3-debugsource
Red Hat:rhel_tus:8.6::appstream
 before 0:3.9.4-13.el8_6.2
0:3.9.4-13.el8_6.2
compat-libtiff3
Red Hat:rhel_e4s:8.8::appstream
 before 0:3.9.4-13.el8_8.2
0:3.9.4-13.el8_8.2
compat-libtiff3-debuginfo
Red Hat:rhel_e4s:8.8::appstream
 before 0:3.9.4-13.el8_8.2
0:3.9.4-13.el8_8.2
compat-libtiff3-debugsource
Red Hat:rhel_e4s:8.8::appstream
 before 0:3.9.4-13.el8_8.2
0:3.9.4-13.el8_8.2
compat-libtiff3
Red Hat:rhel_tus:8.8::appstream
 before 0:3.9.4-13.el8_8.2
0:3.9.4-13.el8_8.2
compat-libtiff3-debuginfo
Red Hat:rhel_tus:8.8::appstream
 before 0:3.9.4-13.el8_8.2
0:3.9.4-13.el8_8.2
compat-libtiff3-debugsource
Red Hat:rhel_tus:8.8::appstream
 before 0:3.9.4-13.el8_8.2
0:3.9.4-13.el8_8.2
compat-libtiff3
Red Hat:rhel_els:7
 before 0:3.9.4-12.el7_9.2
0:3.9.4-12.el7_9.2
compat-libtiff3-debuginfo
Red Hat:rhel_els:7
 before 0:3.9.4-12.el7_9.2
0:3.9.4-12.el7_9.2
libtiff
Red Hat:rhel_els:7
 before 0:4.0.3-35.el7_9.2
0:4.0.3-35.el7_9.2
libtiff-debuginfo
Red Hat:rhel_els:7
 before 0:4.0.3-35.el7_9.2
0:4.0.3-35.el7_9.2
libtiff-devel
Red Hat:rhel_els:7
 before 0:4.0.3-35.el7_9.2
0:4.0.3-35.el7_9.2
libtiff-static
Red Hat:rhel_els:7
 before 0:4.0.3-35.el7_9.2
0:4.0.3-35.el7_9.2
libtiff-tools
Red Hat:rhel_els:7
 before 0:4.0.3-35.el7_9.2
0:4.0.3-35.el7_9.2
libtiff
Red Hat:hummingbird:1
 before 0:4.7.1-2.2.hum1
0:4.7.1-2.2.hum1
libtiff-devel
Red Hat:hummingbird:1
 before 0:4.7.1-2.2.hum1
0:4.7.1-2.2.hum1
libtiff-static
Red Hat:hummingbird:1
 before 0:4.7.1-2.2.hum1
0:4.7.1-2.2.hum1
libtiff-tools
Red Hat:hummingbird:1
 before 0:4.7.1-2.2.hum1
0:4.7.1-2.2.hum1
libtiff
Red Hat:hummingbird:1
 before 0:4.7.1-2.3.hum1
0:4.7.1-2.3.hum1
libtiff-devel
Red Hat:hummingbird:1
 before 0:4.7.1-2.3.hum1
0:4.7.1-2.3.hum1
libtiff-static
Red Hat:hummingbird:1
 before 0:4.7.1-2.3.hum1
0:4.7.1-2.3.hum1
libtiff-tools
Red Hat:hummingbird:1
 before 0:4.7.1-2.3.hum1
0:4.7.1-2.3.hum1
libtiff
Rocky Linux:10
 before 0:4.6.0-6.el10_1.3
0:4.6.0-6.el10_1.3
libtiff
Rocky Linux:9
 before 0:4.4.0-15.el9_7.3
0:4.4.0-15.el9_7.3
mingw-libtiff
Rocky Linux:8
 before 0:4.0.9-4.el8_10
0:4.0.9-4.el8_10
libtiff
Rocky Linux:8
 before 0:4.0.9-37.el8_10
0:4.0.9-37.el8_10
libtiff
Rocky Linux:10
 before 0:4.6.0-8.el10_2.1
0:4.6.0-8.el10_2.1
libtiff
Rocky Linux:9
 before 0:4.4.0-18.el9_8
0:4.4.0-18.el9_8
compat-libtiff3
Rocky Linux:8
 before 0:3.9.4-15.el8_10
0:3.9.4-15.el8_10
tiff
Root:Alpine:3.20
 before 4.6.0t-r00071
4.6.0t-r000714.6.0t-r00072
rootio-tiff
Root:Alpine:3.20
 before 4.6.0t-r00071
4.6.0t-r000714.6.0t-r00072
tiff
SUSE:Linux Micro 6.2
From an advisory covering 8 CVEs
 before 4.7.1-160000.2.1
4.7.1-160000.2.1
tiff
SUSE:Linux Enterprise Server 16.0
From an advisory covering 8 CVEs
 before 4.7.1-160000.2.1
4.7.1-160000.2.1
tiff
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 8 CVEs
 before 4.7.1-160000.2.1
4.7.1-160000.2.1
tiff
SUSE:Linux Micro 6.2
From an advisory covering 3 CVEs
 before 4.7.2-160000.1.1
4.7.2-160000.1.1
tiff
SUSE:Linux Enterprise Server 16.0
From an advisory covering 3 CVEs
 before 4.7.2-160000.1.1
4.7.2-160000.1.1
tiff
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 3 CVEs
 before 4.7.2-160000.1.1
4.7.2-160000.1.1
tiff
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 3 CVEs
 before 4.7.2-150600.3.29.1
4.7.2-150600.3.29.1
tiff
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 3 CVEs
 before 4.7.2-150600.3.29.1
4.7.2-150600.3.29.1
tiff
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 3 CVEs
 before 4.7.2-150600.3.29.1
4.7.2-150600.3.29.1
tiff
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 3 CVEs
 before 4.7.2-150600.3.29.1
4.7.2-150600.3.29.1
gdal
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1.9.0-3.1ubuntu41.9.0-3.1ubuntu61.10.1+dfsg-21.10.1+dfsg-2build11.10.1+dfsg-3
Show 8 moreShow less
1.10.1+dfsg-3build11.10.1+dfsg-3build21.10.1+dfsg-3ubuntu11.10.1+dfsg-3ubuntu21.10.1+dfsg-5ubuntu11.10.1+dfsg-5ubuntu1+esm11.10.1+dfsg-5ubuntu1+esm21.10.1+dfsg-5ubuntu1+esm3
 None known
tiff
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.0.2-4ubuntu34.0.3-5ubuntu14.0.3-64.0.3-6ubuntu14.0.3-7
Show 27 moreShow less
4.0.3-7ubuntu0.14.0.3-7ubuntu0.24.0.3-7ubuntu0.34.0.3-7ubuntu0.44.0.3-7ubuntu0.64.0.3-7ubuntu0.74.0.3-7ubuntu0.84.0.3-7ubuntu0.94.0.3-7ubuntu0.104.0.3-7ubuntu0.114.0.3-7ubuntu0.11+esm14.0.3-7ubuntu0.11+esm24.0.3-7ubuntu0.11+esm34.0.3-7ubuntu0.11+esm44.0.3-7ubuntu0.11+esm54.0.3-7ubuntu0.11+esm64.0.3-7ubuntu0.11+esm74.0.3-7ubuntu0.11+esm84.0.3-7ubuntu0.11+esm94.0.3-7ubuntu0.11+esm104.0.3-7ubuntu0.11+esm114.0.3-7ubuntu0.11+esm124.0.3-7ubuntu0.11+esm134.0.3-7ubuntu0.11+esm144.0.3-7ubuntu0.11+esm154.0.3-7ubuntu0.11+esm164.0.3-7ubuntu0.11+esm17
 None known
tiff
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.0.3-12.3ubuntu24.0.5-14.0.6-14.0.6-1ubuntu0.14.0.6-1ubuntu0.2
Show 25 moreShow less
4.0.6-1ubuntu0.34.0.6-1ubuntu0.44.0.6-1ubuntu0.54.0.6-1ubuntu0.64.0.6-1ubuntu0.74.0.6-1ubuntu0.84.0.6-1ubuntu0.8+esm14.0.6-1ubuntu0.8+esm24.0.6-1ubuntu0.8+esm34.0.6-1ubuntu0.8+esm44.0.6-1ubuntu0.8+esm64.0.6-1ubuntu0.8+esm74.0.6-1ubuntu0.8+esm84.0.6-1ubuntu0.8+esm94.0.6-1ubuntu0.8+esm104.0.6-1ubuntu0.8+esm114.0.6-1ubuntu0.8+esm124.0.6-1ubuntu0.8+esm134.0.6-1ubuntu0.8+esm144.0.6-1ubuntu0.8+esm154.0.6-1ubuntu0.8+esm164.0.6-1ubuntu0.8+esm174.0.6-1ubuntu0.8+esm184.0.6-1ubuntu0.8+esm194.0.6-1ubuntu0.8+esm20
 None known
gdal
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.11.2+dfsg-3ubuntu31.11.2+dfsg-3ubuntu41.11.3+dfsg-2build11.11.3+dfsg-2build21.11.3+dfsg-2build3
Show 5 moreShow less
1.11.3+dfsg-31.11.3+dfsg-3build11.11.3+dfsg-3build21.11.3+dfsg-3ubuntu0.1~esm11.11.3+dfsg-3ubuntu0.1~esm2
 None known
tiff
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.0.8-54.0.8-64.0.9-14.0.9-24.0.9-3
Show 23 moreShow less
4.0.9-44.0.9-4ubuntu14.0.9-54.0.9-5ubuntu0.14.0.9-5ubuntu0.24.0.9-5ubuntu0.34.0.9-5ubuntu0.44.0.9-5ubuntu0.54.0.9-5ubuntu0.64.0.9-5ubuntu0.74.0.9-5ubuntu0.84.0.9-5ubuntu0.94.0.9-5ubuntu0.104.0.9-5ubuntu0.10+esm14.0.9-5ubuntu0.10+esm24.0.9-5ubuntu0.10+esm34.0.9-5ubuntu0.10+esm44.0.9-5ubuntu0.10+esm54.0.9-5ubuntu0.10+esm64.0.9-5ubuntu0.10+esm74.0.9-5ubuntu0.10+esm84.0.9-5ubuntu0.10+esm94.0.9-5ubuntu0.10+esm10
 None known
neuron
Ubuntu:18.04:LTS
 All versions, plus listed versions
7.5-1
 None known
qtwebengine-opensource-src
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.9.1+dfsg-45.9.1+dfsg-4ubuntu15.9.2+dfsg-2ubuntu15.9.3+dfsg-0ubuntu15.9.4+dfsg-0ubuntu15.9.5+dfsg-0ubuntu25.9.5+dfsg-0ubuntu2+esm1
 None known
texmaker
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.5-15.0.2-15.0.2-1build15.0.2-1build25.0.2-1ubuntu0.1~esm1
 None known
tiff
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
4.0.10+git191003-14.1.0+git191117-14.1.0+git191117-24.1.0+git191117-2build14.1.0+git191117-2ubuntu0.20.04.1
Show 16 moreShow less
4.1.0+git191117-2ubuntu0.20.04.24.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.44.1.0+git191117-2ubuntu0.20.04.54.1.0+git191117-2ubuntu0.20.04.64.1.0+git191117-2ubuntu0.20.04.74.1.0+git191117-2ubuntu0.20.04.84.1.0+git191117-2ubuntu0.20.04.94.1.0+git191117-2ubuntu0.20.04.104.1.0+git191117-2ubuntu0.20.04.114.1.0+git191117-2ubuntu0.20.04.124.1.0+git191117-2ubuntu0.20.04.134.1.0+git191117-2ubuntu0.20.04.144.1.0+git191117-2ubuntu0.20.04.14+esm14.1.0+git191117-2ubuntu0.20.04.14+esm24.1.0+git191117-2ubuntu0.20.04.14+esm3
 None known
neuron
Ubuntu:20.04:LTS
 All versions, plus listed versions
7.6.3-1build27.6.3-1build37.6.3-1build4
 None known
qtwebengine-opensource-src
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.12.4+dfsg-1ubuntu15.12.4+dfsg-1ubuntu35.12.5+dfsg-3ubuntu15.12.5+dfsg-6ubuntu25.12.5+dfsg-7
Show 4 moreShow less
5.12.5+dfsg-7build15.12.8+dfsg-0ubuntu15.12.8+dfsg-0ubuntu1.15.12.8+dfsg-0ubuntu1.1+esm1
 None known
texmaker
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.0.3-1build25.0.3-1build35.0.3-1build45.0.3-1build55.0.3-1ubuntu0.20.04.1~esm1
 None known
neuron
Ubuntu:22.04:LTS
 All versions, plus listed versions
7.6.3-1build57.6.3-1build6
 None known
tiff
Ubuntu:22.04:LTS
 All versions, plus listed versions
4.3.0-14.3.0-24.3.0-34.3.0-3build14.3.0-4
Show 15 moreShow less
4.3.0-54.3.0-64.3.0-6ubuntu0.14.3.0-6ubuntu0.24.3.0-6ubuntu0.34.3.0-6ubuntu0.44.3.0-6ubuntu0.54.3.0-6ubuntu0.64.3.0-6ubuntu0.74.3.0-6ubuntu0.84.3.0-6ubuntu0.94.3.0-6ubuntu0.104.3.0-6ubuntu0.114.3.0-6ubuntu0.124.3.0-6ubuntu0.13
 None known
qtwebengine-opensource-src
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
5.15.6+dfsg-15.15.6+dfsg-25.15.7+dfsg-25.15.8+dfsg-15.15.8+dfsg-1build1
Show 4 moreShow less
5.15.8+dfsg-1build25.15.8+dfsg-25.15.9+dfsg-15.15.9+dfsg-1ubuntu0.1~esm1
 None known
texmaker
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
5.0.3-1build85.0.3-1build95.0.3-1ubuntu0.22.04.1~esm1
 None known
tiff
Ubuntu:24.04:LTS
 All versions, plus listed versions
4.5.1+git230720-1ubuntu14.5.1+git230720-3ubuntu14.5.1+git230720-4ubuntu14.5.1+git230720-4ubuntu24.5.1+git230720-4ubuntu2.1
Show 4 moreShow less
4.5.1+git230720-4ubuntu2.24.5.1+git230720-4ubuntu2.34.5.1+git230720-4ubuntu2.44.5.1+git230720-4ubuntu2.5
 None known
qtwebengine-opensource-src
Ubuntu:Pro:24.04:LTS
 All versions, plus listed versions
5.15.15+dfsg-25.15.15+dfsg-2build25.15.15+dfsg-2ubuntu15.15.16+dfsg-15.15.16+dfsg-1ubuntu25.15.16+dfsg-1ubuntu45.15.16+dfsg-35.15.16+dfsg-3ubuntu0.1~esm1
 None known
texmaker
Ubuntu:Pro:24.04:LTS
 All versions, plus listed versions
5.1.3+dfsg-1build45.1.3+dfsg-1build55.1.3+dfsg-1build65.1.3+dfsg-1build75.1.3+dfsg-1build85.1.3+dfsg-1ubuntu0.1~esm1
 None known
qtwebengine-opensource-src
Ubuntu:25.10
 All versions, plus listed versions
5.15.18+dfsg-25.15.18+dfsg-2build15.15.19+dfsg-15.15.19+dfsg2-1
 None known
texmaker
Ubuntu:25.10
 All versions, plus listed versions
5.1.3+dfsg-35.1.3+dfsg-3build1
 None known
tiff
Ubuntu:25.10
 All versions, plus listed versions
4.5.1+git230720-4ubuntu44.7.0-3ubuntu14.7.0-3ubuntu24.7.0-3ubuntu34.7.0-3ubuntu3.1
 None known
qtwebengine-opensource-src
Ubuntu:26.10
 All versions, plus listed versions
5.15.19+dfsg2-45.15.19+dfsg2-65.15.19+dfsg2-7
 None known
tiff
Ubuntu:26.04:LTS
 All versions, plus listed versions
4.7.0-3ubuntu34.7.0-3ubuntu44.7.0-3ubuntu5
 None known
qtwebengine-opensource-src
Ubuntu:Pro:26.04:LTS
 All versions, plus listed versions
5.15.19+dfsg2-15.15.19+dfsg2-1build15.15.19+dfsg2-25.15.19+dfsg2-35.15.19+dfsg2-45.15.19+dfsg2-4ubuntu0.1~esm1
 None known
tiff
openSUSE:Tumbleweed
 before 4.7.1-5.1
4.7.1-5.1
python-Pillow
openSUSE:Tumbleweed
From an advisory covering 24 CVEs
 before 12.3.0-1.1
12.3.0-1.1
tiff
openSUSE:Leap 16.0
From an advisory covering 8 CVEs
 before 4.7.1-160000.2.1
4.7.1-160000.2.1
tiff-man
openSUSE:Leap 16.0
From an advisory covering 8 CVEs
 before 4.7.1-160000.2.1
4.7.1-160000.2.1
tiff
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
 before 4.7.2-160000.1.1
4.7.2-160000.1.1
tiff-man
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
 before 4.7.2-160000.1.1
4.7.2-160000.1.1

History

History
RecordedChangedSources
affectedEUVD, NVD, OSV
factsCVE List
affectedOSV
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-4775 is a high vulnerability (CVSS 7.8) in Libtiff, published March 24, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.57%, the 47th percentile. Fixed in qt6-qtwebengine 6.10.3-r3.

References

Show 133 moreShow less
This page doesn't list everything

Left out on purpose, here and in the API, to keep responses small: 20 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open