Every CVE Search/ Get API key

CVE-2026-52490

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute...

9.8 CriticalFix available

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.73%Up 0.6 points since Aug 25, 2026
90%50%10%1%

What each source reports

CVE List Score used 9.8

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c

Record
CVE-2026-52490
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-94
Updated
2026-11-02
EUVDEUVD-2026-65144 9.8

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c

Record
EUVD-2026-65144
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-6qm2-q5vx-rh4c 9.8

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute...

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c

Record
GHSA-6qm2-q5vx-rh4c
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-94
Updated
2026-11-02
NVD 9.8

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c

Record
CVE-2026-52490
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-94
Updated
2026-11-02
OSVBELL-CVE-2026-52490 9.8
Record
BELL-CVE-2026-52490
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2026-52490 9.8

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c

Record
DEBIAN-CVE-2026-52490
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 11 moreShow less
OSVOESA-2026-3654 9.8

libtiff security update

This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.

Security Fix(es):

An issue in libtiff allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c. The vulnerability is classified as CWE-94 (Code Injection), where the product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.(CVE-2026-52490)

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main() component(CVE-2026-52491)

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image.(CVE-2026-52492)

Record
OESA-2026-3654
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-3655 9.8

libtiff security update

This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.

Security Fix(es):

An issue in libtiff allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c. The vulnerability is classified as CWE-94 (Code Injection), where the product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.(CVE-2026-52490)

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main() component(CVE-2026-52491)

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image.(CVE-2026-52492)

Record
OESA-2026-3655
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:53467 7.3

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:53467
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:69095 7.3

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:69095
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:69095 7.3

Important: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: libtiff: Arbitrary code execution via process_command_opts() function (CVE-2026-52490)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:69095
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:69095 No score

Important: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: libtiff: Arbitrary code execution via process_command_opts() function (CVE-2026-52490)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:69095
Updated
2026-11-02
OSVCLSA-2026-1792993665 No score

libtiff: Fix of CVE-2026-52490

  • CVE-2026-52490: fix stack buffer overflow in tiffcrop -S section handling
Record
CLSA-2026-1792993665
Updated
2026-11-02
OSVCLSA-2026-1792993673 No score

libtiff: Fix of CVE-2026-52490

  • CVE-2026-52490: fix stack buffer overflow in tiffcrop -S section handling
Record
CLSA-2026-1792993673
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-52490 No score

CVE-2026-52490 in tiff - Patched by Root

Root has patched CVE-2026-52490 in the tiff package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-52490
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-52490 No score

CVE-2026-52490 in tiff - Patched by Root

Root has patched CVE-2026-52490 in the tiff package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-52490
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2026-52490 No score

CVE-2026-52490 in tiff - Patched by Root

Root has patched CVE-2026-52490 in the tiff package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2026-52490
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
libtiff
AlmaLinux:8
 before 4.0.9-39.el8_10
4.0.9-39.el8_10
libtiff-devel
AlmaLinux:8
 before 4.0.9-39.el8_10
4.0.9-39.el8_10
libtiff-tools
AlmaLinux:8
 before 4.0.9-39.el8_10
4.0.9-39.el8_10
tiff
Alpaquita:23
 4.4.0-r1 up to 4.4.0-r7
4.4.0-r7
tiff
Alpaquita:25
 4.7.0-r0 up to 4.7.1-r1
4.7.1-r1
tiff
Alpaquita:stream
 4.4.0-r1 up to 4.7.2-r0
4.7.2-r0
tiff
BellSoft Hardened Containers:23
 4.4.0-r1 up to 4.4.0-r7
4.4.0-r7
tiff
BellSoft Hardened Containers:25
 4.7.0-r0 up to 4.7.1-r1
4.7.1-r1
tiff
BellSoft Hardened Containers:stream
 4.4.0-r1 up to 4.7.2-r0
4.7.2-r0
libtiff
TuxCare:RHEL:7
 before 4.0.3-35.0.1.el7_9.tuxcare.els3
4.0.3-35.0.1.el7_9.tuxcare.els3
Show 32 moreShow less
Affected packages
PackageAffectedFixed
libtiff-devel
TuxCare:RHEL:7
 before 4.0.3-35.0.1.el7_9.tuxcare.els3
4.0.3-35.0.1.el7_9.tuxcare.els3
libtiff-static
TuxCare:RHEL:7
 before 4.0.3-35.0.1.el7_9.tuxcare.els3
4.0.3-35.0.1.el7_9.tuxcare.els3
libtiff-tools
TuxCare:RHEL:7
 before 4.0.3-35.0.1.el7_9.tuxcare.els3
4.0.3-35.0.1.el7_9.tuxcare.els3
libtiff
TuxCare:OracleLinux:7
 before 4.0.3-35.0.1.el7.tuxcare.els3
4.0.3-35.0.1.el7.tuxcare.els3
libtiff-devel
TuxCare:OracleLinux:7
 before 4.0.3-35.0.1.el7.tuxcare.els3
4.0.3-35.0.1.el7.tuxcare.els3
libtiff-static
TuxCare:OracleLinux:7
 before 4.0.3-35.0.1.el7.tuxcare.els3
4.0.3-35.0.1.el7.tuxcare.els3
libtiff-tools
TuxCare:OracleLinux:7
 before 4.0.3-35.0.1.el7.tuxcare.els3
4.0.3-35.0.1.el7.tuxcare.els3
tiff
Debian:12
 All versions, plus listed versions
4.5.0-64.5.0-6+deb12u14.5.0-6+deb12u24.5.0-6+deb12u34.5.0-6+deb12u4
Show 18 moreShow less
4.5.1+git230720-14.5.1+git230720-24.5.1+git230720-34.5.1+git230720-44.5.1+git230720-54.5.1-14.5.1~rc3-14.6.0-14.6.0-24.7.0-14.7.0-24.7.0-34.7.0-44.7.0-54.7.1-14.7.1-24.7.1-34.7.2-1
 None known
tiff
Debian:13
 All versions, plus listed versions
4.7.0-34.7.0-3+deb13u14.7.0-3+deb13u24.7.0-3+deb13u34.7.0-4
Show 5 moreShow less
4.7.0-54.7.1-14.7.1-24.7.1-34.7.2-1
 None known
tiff
Debian:14
 before 4.7.2-1, plus listed versions
4.7.0-34.7.0-44.7.0-54.7.1-14.7.1-24.7.1-3
4.7.2-1
libtiff
openEuler:22.03-LTS-SP4
 before 4.3.0-54.oe2203sp4
4.3.0-54.oe2203sp4
libtiff
openEuler:20.03-LTS-SP4
 before 4.3.0-40.oe2003sp4
4.3.0-40.oe2003sp4
libtiff
Red Hat:hummingbird:1
 before 0:4.7.2-2.hum1
0:4.7.2-2.hum1
libtiff-devel
Red Hat:hummingbird:1
 before 0:4.7.2-2.hum1
0:4.7.2-2.hum1
libtiff-static
Red Hat:hummingbird:1
 before 0:4.7.2-2.hum1
0:4.7.2-2.hum1
libtiff-tools
Red Hat:hummingbird:1
 before 0:4.7.2-2.hum1
0:4.7.2-2.hum1
libtiff
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-39.el8_10
0:4.0.9-39.el8_10
libtiff-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-39.el8_10
0:4.0.9-39.el8_10
libtiff-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-39.el8_10
0:4.0.9-39.el8_10
libtiff-devel
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-39.el8_10
0:4.0.9-39.el8_10
libtiff-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-39.el8_10
0:4.0.9-39.el8_10
libtiff-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-39.el8_10
0:4.0.9-39.el8_10
libtiff-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-39.el8_10
0:4.0.9-39.el8_10
libtiff-tools
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-39.el8_10
0:4.0.9-39.el8_10
libtiff-tools-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-39.el8_10
0:4.0.9-39.el8_10
libtiff
Rocky Linux:8
 before 0:4.0.9-39.el8_10
0:4.0.9-39.el8_10
tiff
Root:Debian:11
 before 4.2.0-1+deb11u8.aikido.20
4.2.0-1+deb11u8.aikido.20
rootio-tiff
Root:Debian:11
 before 4.2.0-1+deb11u8.aikido.20
4.2.0-1+deb11u8.aikido.20
tiff
Root:Debian:12
 before 4.5.0-6+deb12u4.aikido.22
4.5.0-6+deb12u4.aikido.22
rootio-tiff
Root:Debian:12
 before 4.5.0-6+deb12u4.aikido.22
4.5.0-6+deb12u4.aikido.22
tiff
Root:Debian:13
 before 4.7.0-3+deb13u3.aikido.10
4.7.0-3+deb13u3.aikido.10
rootio-tiff
Root:Debian:13
 before 4.7.0-3+deb13u3.aikido.10
4.7.0-3+deb13u3.aikido.10

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-52490 is a critical vulnerability (CVSS 9.8) in libtiff, published August 24, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.73%, the 54th percentile. Fixed in libtiff 4.0.9-39.el8_10.

References

Show 34 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open