{"id":"CVE-2026-12912","aliases":["ALSA-2026:41892","ALSA-2026:42668","ALSA-2026:47183","ALSA-2026:47184","AZL-91685","AZL-91688","AZL-91722","BELL-CVE-2026-12912","CLSA-2026-1785406290","CLSA-2026-1785418348","CLSA-2026-1785753237","CLSA-2026-1792241505","DEBIAN-CVE-2026-12912","EUVD-2026-40151","GHSA-cg4c-j43f-qcg7","OESA-2026-2924","OESA-2026-2925","OESA-2026-2926","OESA-2026-2927","OESA-2026-2981","RHSA-2026:34890","RHSA-2026:41892","RHSA-2026:42668","RHSA-2026:47183","RHSA-2026:47184","RHSA-2026:49671","RHSA-2026:50774","RHSA-2026:54638","RHSA-2026:54640","RHSA-2026:54642","RHSA-2026:58545","RHSA-2026:58553","RHSA-2026:58554","RHSA-2026:58556","RHSA-2026:61657","RHSA-2026:69292","RHSA-2026:83550","RLSA-2026:41892","RLSA-2026:42668","RLSA-2026:47183","RLSA-2026:47184","ROOT-OS-DEBIAN-11-CVE-2026-12912","ROOT-OS-DEBIAN-12-CVE-2026-12912","ROOT-OS-DEBIAN-13-CVE-2026-12912","SUSE-SU-2026:22590-1","SUSE-SU-2026:22616-1","SUSE-SU-2026:22796-1","SUSE-SU-2026:22886-1","SUSE-SU-2026:2853-1","SUSE-SU-2026:3027-1","SUSE-SU-2026:3054-1","UBUNTU-CVE-2026-12912","openSUSE-SU-2026:11225-1","openSUSE-SU-2026:21289-1"],"status":"published","title":"Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image","description":"A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00433,"percentile":0.37818,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122"],"published":"2026-06-29T16:31:34Z","modified":"2026-11-09T12:49:53Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"libtiff","fixed_in":["4.4.0-18.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libtiff-devel","fixed_in":["4.4.0-18.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libtiff-tools","fixed_in":["4.4.0-18.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"compat-libtiff3","fixed_in":["3.9.4-16.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libtiff","fixed_in":["4.0.9-38.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libtiff-devel","fixed_in":["4.0.9-38.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libtiff-tools","fixed_in":["4.0.9-38.el8_10"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libtiff","fixed_in":["4.6.0-14"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"tiff","fixed_in":["4.7.2-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"tiff","fixed_in":["4.7.2-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff","fixed_in":["4.4.0-8.el9_2.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-devel","fixed_in":["4.4.0-8.el9_2.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-static","fixed_in":["4.4.0-8.el9_2.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-tools","fixed_in":["4.4.0-8.el9_2.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libtiff","fixed_in":["4.0.3-35.el7.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libtiff-devel","fixed_in":["4.0.3-35.el7.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libtiff-static","fixed_in":["4.0.3-35.el7.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libtiff-tools","fixed_in":["4.0.3-35.el7.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libtiff","fixed_in":["4.4.0-13.el9_6.2.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libtiff-devel","fixed_in":["4.4.0-13.el9_6.2.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libtiff-static","fixed_in":["4.4.0-13.el9_6.2.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libtiff-tools","fixed_in":["4.4.0-13.el9_6.2.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libtiff","fixed_in":["4.0.3-35.0.1.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libtiff-devel","fixed_in":["4.0.3-35.0.1.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libtiff-static","fixed_in":["4.0.3-35.0.1.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libtiff-tools","fixed_in":["4.0.3-35.0.1.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"tiff","fixed_in":["4.7.0-3+deb13u3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"tiff","fixed_in":["4.7.2-1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"libtiff","fixed_in":["4.3.0-52.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"libtiff","fixed_in":["4.6.0-11.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"libtiff","fixed_in":["4.6.0-11.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"libtiff","fixed_in":["4.3.0-38.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP4","package":"libtiff","fixed_in":["4.6.0-11.oe2403sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"libtiff","fixed_in":["0:4.7.1-2.4.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"libtiff-devel","fixed_in":["0:4.7.1-2.4.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"libtiff-static","fixed_in":["0:4.7.1-2.4.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"libtiff-tools","fixed_in":["0:4.7.1-2.4.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff","fixed_in":["0:4.4.0-18.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff-debuginfo","fixed_in":["0:4.4.0-18.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff-debugsource","fixed_in":["0:4.4.0-18.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff-devel","fixed_in":["0:4.4.0-18.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff-tools-debuginfo","fixed_in":["0:4.4.0-18.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libtiff-debuginfo","fixed_in":["0:4.4.0-18.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libtiff-debugsource","fixed_in":["0:4.4.0-18.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libtiff-tools","fixed_in":["0:4.4.0-18.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libtiff-tools-debuginfo","fixed_in":["0:4.4.0-18.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"compat-libtiff3","fixed_in":["0:3.9.4-16.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"compat-libtiff3-debuginfo","fixed_in":["0:3.9.4-16.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"compat-libtiff3-debugsource","fixed_in":["0:3.9.4-16.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff","fixed_in":["0:4.0.9-38.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff-debuginfo","fixed_in":["0:4.0.9-38.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff-debugsource","fixed_in":["0:4.0.9-38.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff-devel","fixed_in":["0:4.0.9-38.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff-tools-debuginfo","fixed_in":["0:4.0.9-38.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libtiff-debuginfo","fixed_in":["0:4.0.9-38.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libtiff-debugsource","fixed_in":["0:4.0.9-38.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libtiff-tools","fixed_in":["0:4.0.9-38.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libtiff-tools-debuginfo","fixed_in":["0:4.0.9-38.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libtiff","fixed_in":["0:4.4.0-13.el9_6.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libtiff-debuginfo","fixed_in":["0:4.4.0-13.el9_6.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libtiff-debugsource","fixed_in":["0:4.4.0-13.el9_6.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libtiff-devel","fixed_in":["0:4.4.0-13.el9_6.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libtiff-tools-debuginfo","fixed_in":["0:4.4.0-13.el9_6.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"libtiff-debuginfo","fixed_in":["0:4.4.0-13.el9_6.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"libtiff-debugsource","fixed_in":["0:4.4.0-13.el9_6.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"libtiff-tools","fixed_in":["0:4.4.0-13.el9_6.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"libtiff-tools-debuginfo","fixed_in":["0:4.4.0-13.el9_6.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"compat-libtiff3","fixed_in":["0:3.9.4-13.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"compat-libtiff3","fixed_in":["0:3.9.4-13.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"compat-libtiff3","fixed_in":["0:3.9.4-13.el8_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"compat-libtiff3","fixed_in":["0:3.9.4-13.el8_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"compat-libtiff3","fixed_in":["0:3.9.4-13.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"compat-libtiff3","fixed_in":["0:3.9.4-13.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libtiff","fixed_in":["0:4.0.9-21.el8_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"libtiff","fixed_in":["0:4.0.9-21.el8_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libtiff","fixed_in":["0:4.0.9-29.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libtiff","fixed_in":["0:4.0.9-29.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libtiff","fixed_in":["0:4.4.0-8.el9_2.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"libtiff","fixed_in":["0:4.4.0-12.el9_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"compat-libtiff3","fixed_in":["0:3.9.4-12.el7_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libtiff","fixed_in":["0:4.0.9-18.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libtiff-debuginfo","fixed_in":["0:4.0.9-18.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libtiff-debugsource","fixed_in":["0:4.0.9-18.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libtiff-devel","fixed_in":["0:4.0.9-18.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libtiff-tools-debuginfo","fixed_in":["0:4.0.9-18.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libtiff","fixed_in":["0:4.0.9-18.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libtiff-debuginfo","fixed_in":["0:4.0.9-18.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libtiff-debugsource","fixed_in":["0:4.0.9-18.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libtiff-devel","fixed_in":["0:4.0.9-18.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libtiff-tools-debuginfo","fixed_in":["0:4.0.9-18.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"libtiff","fixed_in":["0:4.0.3-35.el7_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"libtiff-debuginfo","fixed_in":["0:4.0.3-35.el7_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"libtiff-devel","fixed_in":["0:4.0.3-35.el7_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"libtiff-static","fixed_in":["0:4.0.3-35.el7_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"libtiff-tools","fixed_in":["0:4.0.3-35.el7_9.3"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"libtiff","fixed_in":["0:4.4.0-18.el9_8.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"compat-libtiff3","fixed_in":["0:3.9.4-16.el8_10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"libtiff","fixed_in":["0:4.0.9-38.el8_10"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"tiff","fixed_in":["4.2.0-1+deb11u8.aikido.17","4.2.0-1+deb11u8.aikido.19","4.2.0-1+deb11u8.aikido.18","4.2.0-1+deb11u8.root.io.16","4.2.0-1+deb11u8.aikido.20"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-tiff","fixed_in":["4.2.0-1+deb11u8.aikido.17","4.2.0-1+deb11u8.aikido.19","4.2.0-1+deb11u8.aikido.18","4.2.0-1+deb11u8.root.io.16","4.2.0-1+deb11u8.aikido.20"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"tiff","fixed_in":["4.5.0-6+deb12u4.aikido.20","4.5.0-6+deb12u4.root.io.19","4.5.0-6+deb12u4.aikido.21","4.5.0-6+deb12u4.aikido.22"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-tiff","fixed_in":["4.5.0-6+deb12u4.aikido.20","4.5.0-6+deb12u4.root.io.19","4.5.0-6+deb12u4.aikido.21","4.5.0-6+deb12u4.aikido.22"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:10","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0-8.el10_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0-8.el10_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0-8.el10_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-18.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-18.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-18.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"compat-libtiff3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.4-16.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-38.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-38.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-38.el8_10"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"gdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.6.3-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.3.1-12"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0-14"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0-r1"},{"fixed":"4.7.2-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0-r1"},{"fixed":"4.7.2-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-8.el9_2.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-8.el9_2.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-8.el9_2.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-8.el9_2.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-35.el7.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-35.el7.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libtiff-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-35.el7.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-35.el7.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-13.el9_6.2.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-13.el9_6.2.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libtiff-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-13.el9_6.2.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-13.el9_6.2.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-35.0.1.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-35.0.1.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libtiff-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-35.0.1.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-35.0.1.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5.0-6","4.5.0-6+deb12u1","4.5.0-6+deb12u2","4.5.0-6+deb12u3","4.5.0-6+deb12u4","4.5.1+git230720-1","4.5.1+git230720-2","4.5.1+git230720-3","4.5.1+git230720-4","4.5.1+git230720-5","4.5.1-1","4.5.1~rc3-1","4.6.0-1","4.6.0-2","4.7.0-1","4.7.0-2","4.7.0-3","4.7.0-4","4.7.0-5","4.7.1-1","4.7.1-2","4.7.1-3","4.7.2-1"]},{"source":"osv","ecosystem":"Debian:13","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.0-3+deb13u3"}]}],"versions":["4.7.0-3","4.7.0-3+deb13u1","4.7.0-3+deb13u2"]},{"source":"osv","ecosystem":"Debian:14","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.2-1"}]}],"versions":["4.7.0-3","4.7.0-4","4.7.0-5","4.7.1-1","4.7.1-2","4.7.1-3"]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-52.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0-11.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0-11.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-38.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0-11.oe2403sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-2.4.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-2.4.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libtiff-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-2.4.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-2.4.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-8.el10_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-8.el10_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libtiff-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-8.el10_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-8.el10_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libtiff-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-8.el10_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-8.el10_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-18.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-18.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-18.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-18.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-18.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-18.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libtiff-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-18.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-18.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libtiff-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-18.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"compat-libtiff3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.4-16.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"compat-libtiff3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.4-16.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"compat-libtiff3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.4-16.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-38.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-38.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-38.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-38.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-38.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-38.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libtiff-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-38.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-38.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libtiff-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-38.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-6.el10_0.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-6.el10_0.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libtiff-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-6.el10_0.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-6.el10_0.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libtiff-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-6.el10_0.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-6.el10_0.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-13.el9_6.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-13.el9_6.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libtiff-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-13.el9_6.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-13.el9_6.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libtiff-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-13.el9_6.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-13.el9_6.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"libtiff-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-13.el9_6.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-13.el9_6.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"libtiff-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-13.el9_6.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"compat-libtiff3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.4-13.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"compat-libtiff3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.4-13.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"compat-libtiff3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.4-13.el8_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"compat-libtiff3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.4-13.el8_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"compat-libtiff3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.4-13.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"compat-libtiff3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.4-13.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-21.el8_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-21.el8_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-29.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-29.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-8.el9_2.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"compat-libtiff3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.4-12.el7_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-18.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-18.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libtiff-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-18.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-18.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libtiff-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-18.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-18.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-18.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libtiff-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-18.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-18.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libtiff-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-18.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-35.el7_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-35.el7_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-35.el7_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libtiff-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-35.el7_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-35.el7_9.3"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-8.el10_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-18.el9_8.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"compat-libtiff3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.4-16.el8_10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-38.el8_10"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-1+deb11u8.aikido.17"},{"fixed":"4.2.0-1+deb11u8.aikido.19"},{"fixed":"4.2.0-1+deb11u8.aikido.18"},{"fixed":"4.2.0-1+deb11u8.root.io.16"},{"fixed":"4.2.0-1+deb11u8.aikido.20"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-1+deb11u8.aikido.17"},{"fixed":"4.2.0-1+deb11u8.aikido.19"},{"fixed":"4.2.0-1+deb11u8.aikido.18"},{"fixed":"4.2.0-1+deb11u8.root.io.16"},{"fixed":"4.2.0-1+deb11u8.aikido.20"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-6+deb12u4.aikido.20"},{"fixed":"4.5.0-6+deb12u4.root.io.19"},{"fixed":"4.5.0-6+deb12u4.aikido.21"},{"fixed":"4.5.0-6+deb12u4.aikido.22"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-6+deb12u4.aikido.20"},{"fixed":"4.5.0-6+deb12u4.root.io.19"},{"fixed":"4.5.0-6+deb12u4.aikido.21"},{"fixed":"4.5.0-6+deb12u4.aikido.22"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.2-160000.1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.2-160000.1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.2-160000.1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.2-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.2-slfo.1.1_1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.2-150600.3.29.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.2-150600.3.29.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.2-150600.3.29.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.2-150600.3.29.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.115.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.115.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.69.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.69.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.69.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.69.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.69.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.69.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.69.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.69.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.69.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.69.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.69.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.69.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.69.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.69.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.0-3.1ubuntu4","1.9.0-3.1ubuntu6","1.10.1+dfsg-2","1.10.1+dfsg-2build1","1.10.1+dfsg-3","1.10.1+dfsg-3build1","1.10.1+dfsg-3build2","1.10.1+dfsg-3ubuntu1","1.10.1+dfsg-3ubuntu2","1.10.1+dfsg-5ubuntu1","1.10.1+dfsg-5ubuntu1+esm1","1.10.1+dfsg-5ubuntu1+esm2","1.10.1+dfsg-5ubuntu1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.0.2-4ubuntu3","4.0.3-5ubuntu1","4.0.3-6","4.0.3-6ubuntu1","4.0.3-7","4.0.3-7ubuntu0.1","4.0.3-7ubuntu0.2","4.0.3-7ubuntu0.3","4.0.3-7ubuntu0.4","4.0.3-7ubuntu0.6","4.0.3-7ubuntu0.7","4.0.3-7ubuntu0.8","4.0.3-7ubuntu0.9","4.0.3-7ubuntu0.10","4.0.3-7ubuntu0.11","4.0.3-7ubuntu0.11+esm1","4.0.3-7ubuntu0.11+esm2","4.0.3-7ubuntu0.11+esm3","4.0.3-7ubuntu0.11+esm4","4.0.3-7ubuntu0.11+esm5","4.0.3-7ubuntu0.11+esm6","4.0.3-7ubuntu0.11+esm7","4.0.3-7ubuntu0.11+esm8","4.0.3-7ubuntu0.11+esm9","4.0.3-7ubuntu0.11+esm10","4.0.3-7ubuntu0.11+esm11","4.0.3-7ubuntu0.11+esm12","4.0.3-7ubuntu0.11+esm13","4.0.3-7ubuntu0.11+esm14","4.0.3-7ubuntu0.11+esm15","4.0.3-7ubuntu0.11+esm16","4.0.3-7ubuntu0.11+esm17"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.0.3-12.3ubuntu2","4.0.5-1","4.0.6-1","4.0.6-1ubuntu0.1","4.0.6-1ubuntu0.2","4.0.6-1ubuntu0.3","4.0.6-1ubuntu0.4","4.0.6-1ubuntu0.5","4.0.6-1ubuntu0.6","4.0.6-1ubuntu0.7","4.0.6-1ubuntu0.8","4.0.6-1ubuntu0.8+esm1","4.0.6-1ubuntu0.8+esm2","4.0.6-1ubuntu0.8+esm3","4.0.6-1ubuntu0.8+esm4","4.0.6-1ubuntu0.8+esm6","4.0.6-1ubuntu0.8+esm7","4.0.6-1ubuntu0.8+esm8","4.0.6-1ubuntu0.8+esm9","4.0.6-1ubuntu0.8+esm10","4.0.6-1ubuntu0.8+esm11","4.0.6-1ubuntu0.8+esm12","4.0.6-1ubuntu0.8+esm13","4.0.6-1ubuntu0.8+esm14","4.0.6-1ubuntu0.8+esm15","4.0.6-1ubuntu0.8+esm16","4.0.6-1ubuntu0.8+esm17","4.0.6-1ubuntu0.8+esm18","4.0.6-1ubuntu0.8+esm19","4.0.6-1ubuntu0.8+esm20"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.11.2+dfsg-3ubuntu3","1.11.2+dfsg-3ubuntu4","1.11.3+dfsg-2build1","1.11.3+dfsg-2build2","1.11.3+dfsg-2build3","1.11.3+dfsg-3","1.11.3+dfsg-3build1","1.11.3+dfsg-3build2","1.11.3+dfsg-3ubuntu0.1~esm1","1.11.3+dfsg-3ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.0.8-5","4.0.8-6","4.0.9-1","4.0.9-2","4.0.9-3","4.0.9-4","4.0.9-4ubuntu1","4.0.9-5","4.0.9-5ubuntu0.1","4.0.9-5ubuntu0.2","4.0.9-5ubuntu0.3","4.0.9-5ubuntu0.4","4.0.9-5ubuntu0.5","4.0.9-5ubuntu0.6","4.0.9-5ubuntu0.7","4.0.9-5ubuntu0.8","4.0.9-5ubuntu0.9","4.0.9-5ubuntu0.10","4.0.9-5ubuntu0.10+esm1","4.0.9-5ubuntu0.10+esm2","4.0.9-5ubuntu0.10+esm3","4.0.9-5ubuntu0.10+esm4","4.0.9-5ubuntu0.10+esm5","4.0.9-5ubuntu0.10+esm6","4.0.9-5ubuntu0.10+esm7","4.0.9-5ubuntu0.10+esm8","4.0.9-5ubuntu0.10+esm9","4.0.9-5ubuntu0.10+esm10"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"neuron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.5-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1+dfsg-4","5.9.1+dfsg-4ubuntu1","5.9.2+dfsg-2ubuntu1","5.9.3+dfsg-0ubuntu1","5.9.4+dfsg-0ubuntu1","5.9.5+dfsg-0ubuntu2","5.9.5+dfsg-0ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5-1","5.0.2-1","5.0.2-1build1","5.0.2-1build2","5.0.2-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.0.10+git191003-1","4.1.0+git191117-1","4.1.0+git191117-2","4.1.0+git191117-2build1","4.1.0+git191117-2ubuntu0.20.04.1","4.1.0+git191117-2ubuntu0.20.04.2","4.1.0+git191117-2ubuntu0.20.04.3","4.1.0+git191117-2ubuntu0.20.04.4","4.1.0+git191117-2ubuntu0.20.04.5","4.1.0+git191117-2ubuntu0.20.04.6","4.1.0+git191117-2ubuntu0.20.04.7","4.1.0+git191117-2ubuntu0.20.04.8","4.1.0+git191117-2ubuntu0.20.04.9","4.1.0+git191117-2ubuntu0.20.04.10","4.1.0+git191117-2ubuntu0.20.04.11","4.1.0+git191117-2ubuntu0.20.04.12","4.1.0+git191117-2ubuntu0.20.04.13","4.1.0+git191117-2ubuntu0.20.04.14","4.1.0+git191117-2ubuntu0.20.04.14+esm1","4.1.0+git191117-2ubuntu0.20.04.14+esm2","4.1.0+git191117-2ubuntu0.20.04.14+esm3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"neuron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.6.3-1build2","7.6.3-1build3","7.6.3-1build4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.12.4+dfsg-1ubuntu1","5.12.4+dfsg-1ubuntu3","5.12.5+dfsg-3ubuntu1","5.12.5+dfsg-6ubuntu2","5.12.5+dfsg-7","5.12.5+dfsg-7build1","5.12.8+dfsg-0ubuntu1","5.12.8+dfsg-0ubuntu1.1","5.12.8+dfsg-0ubuntu1.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.3-1build2","5.0.3-1build3","5.0.3-1build4","5.0.3-1build5","5.0.3-1ubuntu0.20.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.0-1","4.3.0-2","4.3.0-3","4.3.0-3build1","4.3.0-4","4.3.0-5","4.3.0-6","4.3.0-6ubuntu0.1","4.3.0-6ubuntu0.2","4.3.0-6ubuntu0.3","4.3.0-6ubuntu0.4","4.3.0-6ubuntu0.5","4.3.0-6ubuntu0.6","4.3.0-6ubuntu0.7","4.3.0-6ubuntu0.8","4.3.0-6ubuntu0.9","4.3.0-6ubuntu0.10","4.3.0-6ubuntu0.11","4.3.0-6ubuntu0.12","4.3.0-6ubuntu0.13"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.6+dfsg-1","5.15.6+dfsg-2","5.15.7+dfsg-2","5.15.8+dfsg-1","5.15.8+dfsg-1build1","5.15.8+dfsg-1build2","5.15.8+dfsg-2","5.15.9+dfsg-1","5.15.9+dfsg-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.3-1build8","5.0.3-1build9","5.0.3-1ubuntu0.22.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5.1+git230720-1ubuntu1","4.5.1+git230720-3ubuntu1","4.5.1+git230720-4ubuntu1","4.5.1+git230720-4ubuntu2","4.5.1+git230720-4ubuntu2.1","4.5.1+git230720-4ubuntu2.2","4.5.1+git230720-4ubuntu2.3","4.5.1+git230720-4ubuntu2.4","4.5.1+git230720-4ubuntu2.5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.15+dfsg-2","5.15.15+dfsg-2build2","5.15.15+dfsg-2ubuntu1","5.15.16+dfsg-1","5.15.16+dfsg-1ubuntu2","5.15.16+dfsg-1ubuntu4","5.15.16+dfsg-3","5.15.16+dfsg-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3+dfsg-1build4","5.1.3+dfsg-1build5","5.1.3+dfsg-1build6","5.1.3+dfsg-1build7","5.1.3+dfsg-1build8","5.1.3+dfsg-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.18+dfsg-2","5.15.18+dfsg-2build1","5.15.19+dfsg-1","5.15.19+dfsg2-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3+dfsg-3","5.1.3+dfsg-3build1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5.1+git230720-4ubuntu4","4.7.0-3ubuntu1","4.7.0-3ubuntu2","4.7.0-3ubuntu3","4.7.0-3ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.19+dfsg2-4","5.15.19+dfsg2-6","5.15.19+dfsg2-7"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.7.0-3ubuntu4","4.7.1-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.7.0-3ubuntu3","4.7.0-3ubuntu4","4.7.0-3ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.19+dfsg2-1","5.15.19+dfsg2-1build1","5.15.19+dfsg2-2","5.15.19+dfsg2-3","5.15.19+dfsg2-4","5.15.19+dfsg2-4ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.2-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.2-160000.1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"tiff-man","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.2-160000.1.1"}]}],"bundled":3}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 7 extended lifecycle support"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"},{"vendor":"red hat","product":"red hat hardened images"},{"vendor":"red hat","product":"red hat openshift ai 3.0"},{"vendor":"red hat","product":"red hat openshift ai 3.2"},{"vendor":"red hat","product":"red hat openshift ai 3.4"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:34890","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:41892","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:42668","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:47183","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:47184","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:49671","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:50774","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54638","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54640","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54642","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:58545","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:58553","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:58554","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:58556","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:61657","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69292","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:73909","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:73959","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:73960","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:73961","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:73962","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:74458","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:74459","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:74460","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:74461","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:74462","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:74463","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:74674","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:83550","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-12912","tags":["vdb-entry","x_refsource_REDHAT","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492871","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://gitlab.com/libtiff/libtiff/-/merge_requests/873","tags":["article"]},{"url":"https://gitlab.com/libtiff/libtiff/-/work_items/824","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12912.json","tags":["x_sadp-csaf-vex","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12912","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-cg4c-j43f-qcg7"},{"url":"https://access.redhat.com/security/cve/CVE-2023-52355","tags":["report"]},{"url":"https://bugzilla.redhat.com/2251326","tags":["report"]},{"url":"https://bugzilla.redhat.com/2492871","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-41892.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-42668.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-47183.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-47184.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-12912","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1785406290.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1785418348.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1785753237.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1792241505.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-12912","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2924","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2925","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2926","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2927","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2981","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_34890.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-12912","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2251326","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41892.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-52355","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52355","tags":["advisory"]},{"url":"https://gitlab.com/libtiff/libtiff/-/issues/621","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42668.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47183.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47184.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49671.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50774.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54638.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54640.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54642.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_58545.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_58553.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_58554.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_58556.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_61657.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69292.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_83550.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:41892","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:42668","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:47183","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:47184","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622590-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1268434","tags":["report"]},{"url":"https://bugzilla.suse.com/1269779","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-36849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4775","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622616-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622796-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1257123","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622886-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262853-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263027-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263054-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-12912","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-12912","title":"Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image","description":"A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).","status":"published","published":"2026-06-29T16:31:34.581Z","modified":"2026-11-04T22:04:42.514Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-122","CWE-122"],"updated_at":"2026-11-04T23:40:09.798467Z"}],"euvd":[{"id":"EUVD-2026-40151","description":"A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).","status":"published","published":"2026-06-29T16:31:34Z","modified":"2026-11-04T22:04:42Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-04T23:47:18.620008Z"}],"ghsa":[{"id":"GHSA-cg4c-j43f-qcg7","title":"A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a...","description":"A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).","status":"published","published":"2026-06-29T18:31:54Z","modified":"2026-10-15T18:31:33Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:13:36.44286Z"}],"nvd":[{"id":"CVE-2026-12912","description":"A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).","status":"published","published":"2026-06-29T17:16:28.23Z","modified":"2026-11-04T22:17:57.373Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-122"],"updated_at":"2026-11-04T23:43:39.147797Z"}],"osv":[{"id":"BELL-CVE-2026-12912","status":"published","published":"2026-07-01T06:03:01.588006Z","modified":"2026-09-06T07:15:10.561801787Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:23.037038Z"},{"id":"DEBIAN-CVE-2026-12912","description":"A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).","status":"published","published":"2026-06-29T17:16:28.23Z","modified":"2026-11-05T09:47:30.861890417Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-05T13:31:24.64316Z"},{"id":"OESA-2026-2924","title":"libtiff security update","description":"This  provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).(CVE-2026-12912)","status":"published","published":"2026-07-09T11:11:49Z","modified":"2026-08-18T01:21:16.921590678Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-2925","title":"libtiff security update","description":"This  provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).(CVE-2026-12912)","status":"published","published":"2026-07-09T11:11:50Z","modified":"2026-08-18T01:21:17.019768912Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-2926","title":"libtiff security update","description":"This  provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).(CVE-2026-12912)","status":"published","published":"2026-07-09T11:11:50Z","modified":"2026-08-18T01:21:16.923658896Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-2927","title":"libtiff security update","description":"This  provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).(CVE-2026-12912)","status":"published","published":"2026-07-09T11:11:50Z","modified":"2026-08-18T01:21:16.813980683Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-2981","title":"libtiff security update","description":"This  provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).(CVE-2026-12912)","status":"published","published":"2026-07-19T11:11:52Z","modified":"2026-08-18T01:21:16.964650703Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"RHSA-2026:34890","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-07-03T10:13:57Z","modified":"2026-10-16T10:16:07Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:41892","title":"Red Hat Security Advisory: libtiff security, bug fix, and enhancement update","status":"published","published":"2026-07-20T10:13:42Z","modified":"2026-10-16T10:17:42Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:42668","title":"Red Hat Security Advisory: libtiff security update","status":"published","published":"2026-07-23T10:14:09Z","modified":"2026-10-16T10:17:54Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:47183","title":"Red Hat Security Advisory: compat-libtiff3 security update","status":"published","published":"2026-08-03T10:17:14Z","modified":"2026-10-16T10:18:34Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:47184","title":"Red Hat Security Advisory: libtiff security update","status":"published","published":"2026-08-03T10:17:15Z","modified":"2026-10-16T10:18:35Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:49671","title":"Red Hat Security Advisory: libtiff security, bug fix, and enhancement update","status":"published","published":"2026-08-04T10:26:56Z","modified":"2026-10-16T10:19:03Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:50774","title":"Red Hat Security Advisory: libtiff security update","status":"published","published":"2026-08-06T10:14:04Z","modified":"2026-10-16T10:19:19Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:54638","title":"Red Hat Security Advisory: compat-libtiff3 security update","status":"published","published":"2026-08-14T10:17:00Z","modified":"2026-10-16T10:20:02Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:54640","title":"Red Hat Security Advisory: compat-libtiff3 security update","status":"published","published":"2026-08-14T10:17:00Z","modified":"2026-10-16T10:20:02Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:54642","title":"Red Hat Security Advisory: compat-libtiff3 security update","status":"published","published":"2026-08-14T10:17:01Z","modified":"2026-10-16T10:20:03Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:58545","title":"Red Hat Security Advisory: libtiff security update","status":"published","published":"2026-08-24T10:18:36Z","modified":"2026-10-16T10:20:38Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:58553","title":"Red Hat Security Advisory: libtiff security update","status":"published","published":"2026-08-24T10:18:38Z","modified":"2026-10-16T10:20:40Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:58554","title":"Red Hat Security Advisory: libtiff security update","status":"published","published":"2026-08-24T10:18:38Z","modified":"2026-10-16T10:20:41Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:58556","title":"Red Hat Security Advisory: libtiff security update","status":"published","published":"2026-08-24T10:18:39Z","modified":"2026-10-16T10:20:41Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:61657","title":"Red Hat Security Advisory: compat-libtiff3 security update","status":"published","published":"2026-09-01T10:28:33Z","modified":"2026-10-16T10:21:30Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:69292","title":"Red Hat Security Advisory: libtiff security update","status":"published","published":"2026-09-22T10:19:56Z","modified":"2026-10-16T10:23:52Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:83550","title":"Red Hat Security Advisory: libtiff security update","status":"published","published":"2026-10-16T10:27:28Z","modified":"2026-10-16T10:30:41.901488979Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RLSA-2026:41892","title":"Important: libtiff security, bug fix, and enhancement update","description":"The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.\n\nSecurity Fix(es):\n\n* libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM (CVE-2023-52355)\n\n* libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)\n\nBug Fix(es) and Enhancement(s):\n\n* Reintroduce the `tiffcp -i` option (JIRA:Rocky Linux-185328)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-22T12:05:54.42934Z","modified":"2026-07-22T12:30:05.653987386Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:42668","title":"Important: libtiff security update","description":"The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.\n\nSecurity Fix(es):\n\n* libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-22T12:03:41.8445Z","modified":"2026-07-22T12:30:05.65866182Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:47183","title":"Important: compat-libtiff3 security update","description":"The libtiff3 package provides libtiff 3, an older version of libtiff library for manipulating TIFF (Tagged Image File Format) image format files. This version should be used only if you are unable to use the current version of libtiff.\n\nSecurity Fix(es):\n\n* libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-03T12:01:09.862125Z","modified":"2026-08-03T12:30:05.346677411Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:47184","title":"Important: libtiff security update","description":"The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.\n\nSecurity Fix(es):\n\n* libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-03T12:01:09.862125Z","modified":"2026-08-03T12:30:05.513157744Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"UBUNTU-CVE-2026-12912","description":"A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).","status":"published","published":"2026-06-29T17:16:00Z","modified":"2026-11-09T12:49:53.190330311Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-09T13:27:42.046613Z"},{"id":"ALSA-2026:41892","title":"Important: libtiff security, bug fix, and enhancement update","description":"The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  \n\nSecurity Fix(es):  \n\n  * libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM (CVE-2023-52355)\n  * libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * Reintroduce the `tiffcp -i` option (JIRA:AlmaLinux-185328)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-20T00:00:00Z","modified":"2026-10-29T11:30:36.284536682Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:42668","title":"Important: libtiff security update","description":"The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  \n\nSecurity Fix(es):  \n\n  * libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-21T00:00:00Z","modified":"2026-10-29T11:31:39.349586414Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:47183","title":"Important: compat-libtiff3 security update","description":"The libtiff3 package provides libtiff 3, an older version of libtiff library for manipulating TIFF (Tagged Image File Format) image format files. This version should be used only if you are unable to use the current version of libtiff.  \n\nSecurity Fix(es):  \n\n  * libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-28T00:00:00Z","modified":"2026-10-29T11:02:24.88046029Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:47184","title":"Important: libtiff security update","description":"The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  \n\nSecurity Fix(es):  \n\n  * libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-28T00:00:00Z","modified":"2026-10-29T11:02:24.693576273Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"AZL-91685","title":"CVE-2026-12912 affecting package gdal 3.6.3-2","description":"A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).","status":"published","published":"2026-06-29T17:16:28Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:25.633663Z"},{"id":"AZL-91688","title":"CVE-2026-12912 affecting package openjpeg2 2.3.1-12","description":"A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).","status":"published","published":"2026-06-29T17:16:28Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:25.633663Z"},{"id":"AZL-91722","title":"CVE-2026-12912 affecting package libtiff for versions less than 4.6.0-14","description":"A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).","status":"published","published":"2026-06-29T17:16:28Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:25.633663Z"},{"id":"CLSA-2026-1785406290","title":"libtiff: Fix of CVE-2026-12912","description":"- CVE-2026-12912: heap-based buffer overflow in PixarLog 8BITABGR decode with stride 3","status":"published","published":"2026-07-30T10:11:40Z","modified":"2026-10-26T09:30:30.400417289Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1785418348","title":"libtiff: Fix of CVE-2026-12912","description":"- CVE-2026-12912: fix heap-based buffer overflow in PixarLogDecode() when\n  decoding PixarLog images with the PIXARLOGDATAFMT_8BITABGR output format\n  and stride 3","status":"published","published":"2026-07-30T13:32:39Z","modified":"2026-10-26T09:31:43.003087835Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1785753237","title":"libtiff: Fix of CVE-2026-12912","description":"- CVE-2026-12912: fix heap-buffer-overflow in PixarLog 8BITABGR decode with\n  stride 3 in PixarLogDecode()","status":"published","published":"2026-08-03T10:34:08Z","modified":"2026-10-26T09:31:24.137388724Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1792241505","title":"libtiff: Fix of CVE-2026-12912","description":"- Build the rhel7-els target with dist .el7_9 to match the RHEL 7 ELS\n  vendor package suffix","status":"published","published":"2026-10-17T12:51:55Z","modified":"2026-10-26T09:31:46.50158969Z","updated_at":"2026-11-02T15:43:52.011757Z"},{"id":"openSUSE-SU-2026:11225-1","title":"libtiff-devel-32bit-4.7.2-1.1 on GA media","description":"These are all security issues fixed in the libtiff-devel-32bit-4.7.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-08T00:00:00Z","modified":"2026-07-09T10:00:08.540600021Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:21289-1","title":"Security update for tiff","description":"This update for tiff fixes the following issues\n\n- CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779).\n- CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large SamplesPerPixel tag value\n  (bsc#1268434).\n\nChanges for tiff:\n\n- Update to 4.7.2:\n\n Software configuration changes:\n\n * cmake: Fix bundle identifiers to use reverse-DNS format\n * cmake: Fix and improve Apple framework build support\n * cmake: Use TurboJPEG CONFIG by default (issue #767)\n * cmake: changes related to 8-/12-bit modes\n * cmake: Replace CMath::CMath with direct link to avoid export.\n * Support for iOS-derived builds\n * Simplify cmake byte order version check\n * Add additional warnings, primarily floating precision conversions and integer arithmetic conversions\n * configure.ac: Require bootstrap with at least Autoconf 2.71.\n\n Bug fixes:\n\n * Handle negative TIFFReadFile results before state updates (issue #854)\n * tif_dirread.c: fix copy-paste bug in ChopUpSingleUncompressedStrip\n * tif_read.c: Fixed division by zero in TIFFStartStrip() (issue #777)\n * tif_dirwrite.c: add integer overflow checks to allocation size calculations\n * tif_print.c: add integer overflow checks to allocation size calculations\n * tif_write.c: fix OOB read and underflow in TIFFAppendToStrip copy loop\n * DumpModeSeek: add bounds check to prevent OOB pointer advance\n * TIFFGrowStrips: fix use-after-free on partial realloc failure.\n * Fix NULL dereference in _TIFFReserveLargeEnoughWriteBuffer() by validating the strip bytecount array before accessing it.\n * TIFFRGBAImage: avoid int overflows in put functions (issue #830)\n * tif_getimage: fix inconsistent fromskew handling in put16bitbwtile (issue #792)\n * tif_getimage: Widen pointer-offset arithmetic in tif_getimage\n * putcontig8bitYCbCr44tile: fix wrong fromskew computation (issue #798)\n * putcontig8bitYCbCr42tile: Reject invalid YCbCr subsampling when image dimensions are smaller than the subsampling block to prevent out-of-bounds writes. (issue #753)\n * TIFFFillStrip/Tile(): avoid excessive memory allocation (issue #831)\n * TIFFLinkDirectory() checks for IFD loops (issue #788)\n * Check result of _TIFFCheckRealloc to prevent memory leaks and segmentation fault when reallocation fails.\n * TIFFVTileSize64(): in YCbCr contig non upsampled mode, validate td_samplesperpixel==3 (issue #805)\n * TIFFReadDirEntryPersampleShort(): be tolerant to tags like SampleFormat not having 1 or SamplesPerPixel values (https://github.com/OSGeo/gdal/issues/13465)\n * tif_getimage: reject tile widths that would overflow toskew (issue #808)\n * Fix integer overflow in _TIFFPartialReadStripArray on 32-bit.\n * TIFFAppendToStrip(): add some checks to avoid null-pointer-dereferencing (issue #777).\n * _TIFFGetStrileOffsetOrByteCountValue(): fix potential crash on corrupted files when file opened in 'O' mode (https://issues.oss-fuzz.com/issues/471328917)\n * TIFFReadDirectory(): re-set TIFF_LAZYSTRILELOAD if file opened in 'O' mode\n * _TIFFMergeFields(): avoid NULL ptr dereference (issue #755).\n * Check td_stripbytecount_p and td_stripoffset_p for NULL pointer before (re-)writing to file. (issue #749)\n * JPEGDecodeRaw: initialize output buffer to avoid returning uninitialized memory (issue #892)\n * JPEG decompressor: initialize output buffer when JPEG image is smaller than strile dimension to avoid heap memory disclosure (issue #826)\n * JPEG: fix generation of tiled 12-bit JPEG compressed files with libjpeg-turbo 3.0.3 (issue #773)\n * JPEGDecode(): fix memory leak in error code path (https://issues.oss-fuzz.com/issues/471945501)\n * tif_jpeg: reject mismatched JPEG data precision to avoid write overflow\n * Fix signed left-shift UB in LogLuv RANDITHER encoding (issue #850)\n * PixarLog: error out on invalid ABGR output buffer sizes.\n * PixarLog: complete ABGR bounds check for multi-row strip decoding.\n * PixarLog: fix undoing horizontal differencing when SamplesPerPixel != 3 and 4 (issue #789).\n * PixarLog codec: fix potential integer overflow/out-of-bounds access (issue #797)\n * TIFFAdvanceDirectory(): avoid potential read heap-buffer-overflow in mmap code path on 32 bit builds (https://issues.oss-fuzz.com/issues/506737072)\n * OJPEG: fix integer overflow in subsampling buffer allocation.\n * OJPEG: fix nullptr deref when changing compression method from OJPEG to something else (issue #795).\n * OJPEG fix potential integer overflow/out-of-bounds access (issue #796).\n * ojpeg: prevent EOF infinite loop (fixes commit 2a3d55b)\n * fix null pointer deference in issue #782.\n * fix stack-overflow in issue #784.\n\n Other changes:\n\n * Change EXIF and GPS tag type from IFD8 to LONG8 per EXIF-specification (issue #739).\n * Harden integer size and offset calculations (issue #897)\n * TIFFComputeTile/TIFFComputeStrip: use overflow-checked multiplication\n * Move widening casts inside multiplication scope.\n * Lots of compiler warning fixes related to enabling more warning flags\n * Align writing and reading of TIFF_LONG8 and TIFF_IFD8 tags (issue #773)\n * TIFFFillStrip(): prevent harmless unsigned integer overflow\n","status":"published","published":"2026-07-10T08:42:03Z","modified":"2026-07-13T18:24:57.14303309Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2026-12912","title":"CVE-2026-12912 in tiff - Patched by Root","description":"Root has patched CVE-2026-12912 in the tiff package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-09-02T13:00:50Z","modified":"2026-09-02T16:15:02.935725109Z","updated_at":"2026-11-02T15:53:29.631993Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-12912","title":"CVE-2026-12912 in tiff - Patched by Root","description":"Root has patched CVE-2026-12912 in the tiff package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-09-02T12:45:33Z","modified":"2026-09-02T14:00:08.547934685Z","updated_at":"2026-11-02T15:53:31.773105Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2026-12912","title":"CVE-2026-12912 in rootio-tiff - Patched by Root","description":"Root has patched CVE-2026-12912 in the rootio-tiff package for Root:Debian:13. Multiple fixed versions available.","status":"withdrawn","published":"2026-07-09T11:11:54Z","modified":"2026-07-27T14:00:18.273606199Z","updated_at":"2026-11-02T15:53:33.153539Z"},{"id":"SUSE-SU-2026:22590-1","title":"Security update for tiff","description":"This update for tiff fixes the following issues\n\n- CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779).\n- CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large SamplesPerPixel tag value\n  (bsc#1268434).\n\nChanges for tiff:\n\n- Update to 4.7.2:\n\n Software configuration changes:\n\n * cmake: Fix bundle identifiers to use reverse-DNS format\n * cmake: Fix and improve Apple framework build support\n * cmake: Use TurboJPEG CONFIG by default (issue #767)\n * cmake: changes related to 8-/12-bit modes\n * cmake: Replace CMath::CMath with direct link to avoid export.\n * Support for iOS-derived builds\n * Simplify cmake byte order version check\n * Add additional warnings, primarily floating precision conversions and integer arithmetic conversions\n * configure.ac: Require bootstrap with at least Autoconf 2.71.\n\n Bug fixes:\n\n * Handle negative TIFFReadFile results before state updates (issue #854)\n * tif_dirread.c: fix copy-paste bug in ChopUpSingleUncompressedStrip\n * tif_read.c: Fixed division by zero in TIFFStartStrip() (issue #777)\n * tif_dirwrite.c: add integer overflow checks to allocation size calculations\n * tif_print.c: add integer overflow checks to allocation size calculations\n * tif_write.c: fix OOB read and underflow in TIFFAppendToStrip copy loop\n * DumpModeSeek: add bounds check to prevent OOB pointer advance\n * TIFFGrowStrips: fix use-after-free on partial realloc failure.\n * Fix NULL dereference in _TIFFReserveLargeEnoughWriteBuffer() by validating the strip bytecount array before accessing it.\n * TIFFRGBAImage: avoid int overflows in put functions (issue #830)\n * tif_getimage: fix inconsistent fromskew handling in put16bitbwtile (issue #792)\n * tif_getimage: Widen pointer-offset arithmetic in tif_getimage\n * putcontig8bitYCbCr44tile: fix wrong fromskew computation (issue #798)\n * putcontig8bitYCbCr42tile: Reject invalid YCbCr subsampling when image dimensions are smaller than the subsampling block to prevent out-of-bounds writes. (issue #753)\n * TIFFFillStrip/Tile(): avoid excessive memory allocation (issue #831)\n * TIFFLinkDirectory() checks for IFD loops (issue #788)\n * Check result of _TIFFCheckRealloc to prevent memory leaks and segmentation fault when reallocation fails.\n * TIFFVTileSize64(): in YCbCr contig non upsampled mode, validate td_samplesperpixel==3 (issue #805)\n * TIFFReadDirEntryPersampleShort(): be tolerant to tags like SampleFormat not having 1 or SamplesPerPixel values (https://github.com/OSGeo/gdal/issues/13465)\n * tif_getimage: reject tile widths that would overflow toskew (issue #808)\n * Fix integer overflow in _TIFFPartialReadStripArray on 32-bit.\n * TIFFAppendToStrip(): add some checks to avoid null-pointer-dereferencing (issue #777).\n * _TIFFGetStrileOffsetOrByteCountValue(): fix potential crash on corrupted files when file opened in 'O' mode (https://issues.oss-fuzz.com/issues/471328917)\n * TIFFReadDirectory(): re-set TIFF_LAZYSTRILELOAD if file opened in 'O' mode\n * _TIFFMergeFields(): avoid NULL ptr dereference (issue #755).\n * Check td_stripbytecount_p and td_stripoffset_p for NULL pointer before (re-)writing to file. (issue #749)\n * JPEGDecodeRaw: initialize output buffer to avoid returning uninitialized memory (issue #892)\n * JPEG decompressor: initialize output buffer when JPEG image is smaller than strile dimension to avoid heap memory disclosure (issue #826)\n * JPEG: fix generation of tiled 12-bit JPEG compressed files with libjpeg-turbo 3.0.3 (issue #773)\n * JPEGDecode(): fix memory leak in error code path (https://issues.oss-fuzz.com/issues/471945501)\n * tif_jpeg: reject mismatched JPEG data precision to avoid write overflow\n * Fix signed left-shift UB in LogLuv RANDITHER encoding (issue #850)\n * PixarLog: error out on invalid ABGR output buffer sizes.\n * PixarLog: complete ABGR bounds check for multi-row strip decoding.\n * PixarLog: fix undoing horizontal differencing when SamplesPerPixel != 3 and 4 (issue #789).\n * PixarLog codec: fix potential integer overflow/out-of-bounds access (issue #797)\n * TIFFAdvanceDirectory(): avoid potential read heap-buffer-overflow in mmap code path on 32 bit builds (https://issues.oss-fuzz.com/issues/506737072)\n * OJPEG: fix integer overflow in subsampling buffer allocation.\n * OJPEG: fix nullptr deref when changing compression method from OJPEG to something else (issue #795).\n * OJPEG fix potential integer overflow/out-of-bounds access (issue #796).\n * ojpeg: prevent EOF infinite loop (fixes commit 2a3d55b)\n * fix null pointer deference in issue #782.\n * fix stack-overflow in issue #784.\n\n Other changes:\n\n * Change EXIF and GPS tag type from IFD8 to LONG8 per EXIF-specification (issue #739).\n * Harden integer size and offset calculations (issue #897)\n * TIFFComputeTile/TIFFComputeStrip: use overflow-checked multiplication\n * Move widening casts inside multiplication scope.\n * Lots of compiler warning fixes related to enabling more warning flags\n * Align writing and reading of TIFF_LONG8 and TIFF_IFD8 tags (issue #773)\n * TIFFFillStrip(): prevent harmless unsigned integer overflow\n","status":"published","published":"2026-07-10T08:42:17Z","modified":"2026-07-16T18:24:37.780027407Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:22616-1","title":"Security update for tiff","description":"This update for tiff fixes the following issues\n\n- CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779).\n- CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large SamplesPerPixel tag value\n  (bsc#1268434).\n\nChanges for tiff:\n\n- Update to 4.7.2:\n\n Software configuration changes:\n\n * cmake: Fix bundle identifiers to use reverse-DNS format\n * cmake: Fix and improve Apple framework build support\n * cmake: Use TurboJPEG CONFIG by default (issue #767)\n * cmake: changes related to 8-/12-bit modes\n * cmake: Replace CMath::CMath with direct link to avoid export.\n * Support for iOS-derived builds\n * Simplify cmake byte order version check\n * Add additional warnings, primarily floating precision conversions and integer arithmetic conversions\n * configure.ac: Require bootstrap with at least Autoconf 2.71.\n\n Bug fixes:\n\n * Handle negative TIFFReadFile results before state updates (issue #854)\n * tif_dirread.c: fix copy-paste bug in ChopUpSingleUncompressedStrip\n * tif_read.c: Fixed division by zero in TIFFStartStrip() (issue #777)\n * tif_dirwrite.c: add integer overflow checks to allocation size calculations\n * tif_print.c: add integer overflow checks to allocation size calculations\n * tif_write.c: fix OOB read and underflow in TIFFAppendToStrip copy loop\n * DumpModeSeek: add bounds check to prevent OOB pointer advance\n * TIFFGrowStrips: fix use-after-free on partial realloc failure.\n * Fix NULL dereference in _TIFFReserveLargeEnoughWriteBuffer() by validating the strip bytecount array before accessing it.\n * TIFFRGBAImage: avoid int overflows in put functions (issue #830)\n * tif_getimage: fix inconsistent fromskew handling in put16bitbwtile (issue #792)\n * tif_getimage: Widen pointer-offset arithmetic in tif_getimage\n * putcontig8bitYCbCr44tile: fix wrong fromskew computation (issue #798)\n * putcontig8bitYCbCr42tile: Reject invalid YCbCr subsampling when image dimensions are smaller than the subsampling block to prevent out-of-bounds writes. (issue #753)\n * TIFFFillStrip/Tile(): avoid excessive memory allocation (issue #831)\n * TIFFLinkDirectory() checks for IFD loops (issue #788)\n * Check result of _TIFFCheckRealloc to prevent memory leaks and segmentation fault when reallocation fails.\n * TIFFVTileSize64(): in YCbCr contig non upsampled mode, validate td_samplesperpixel==3 (issue #805)\n * TIFFReadDirEntryPersampleShort(): be tolerant to tags like SampleFormat not having 1 or SamplesPerPixel values (https://github.com/OSGeo/gdal/issues/13465)\n * tif_getimage: reject tile widths that would overflow toskew (issue #808)\n * Fix integer overflow in _TIFFPartialReadStripArray on 32-bit.\n * TIFFAppendToStrip(): add some checks to avoid null-pointer-dereferencing (issue #777).\n * _TIFFGetStrileOffsetOrByteCountValue(): fix potential crash on corrupted files when file opened in 'O' mode (https://issues.oss-fuzz.com/issues/471328917)\n * TIFFReadDirectory(): re-set TIFF_LAZYSTRILELOAD if file opened in 'O' mode\n * _TIFFMergeFields(): avoid NULL ptr dereference (issue #755).\n * Check td_stripbytecount_p and td_stripoffset_p for NULL pointer before (re-)writing to file. (issue #749)\n * JPEGDecodeRaw: initialize output buffer to avoid returning uninitialized memory (issue #892)\n * JPEG decompressor: initialize output buffer when JPEG image is smaller than strile dimension to avoid heap memory disclosure (issue #826)\n * JPEG: fix generation of tiled 12-bit JPEG compressed files with libjpeg-turbo 3.0.3 (issue #773)\n * JPEGDecode(): fix memory leak in error code path (https://issues.oss-fuzz.com/issues/471945501)\n * tif_jpeg: reject mismatched JPEG data precision to avoid write overflow\n * Fix signed left-shift UB in LogLuv RANDITHER encoding (issue #850)\n * PixarLog: error out on invalid ABGR output buffer sizes.\n * PixarLog: complete ABGR bounds check for multi-row strip decoding.\n * PixarLog: fix undoing horizontal differencing when SamplesPerPixel != 3 and 4 (issue #789).\n * PixarLog codec: fix potential integer overflow/out-of-bounds access (issue #797)\n * TIFFAdvanceDirectory(): avoid potential read heap-buffer-overflow in mmap code path on 32 bit builds (https://issues.oss-fuzz.com/issues/506737072)\n * OJPEG: fix integer overflow in subsampling buffer allocation.\n * OJPEG: fix nullptr deref when changing compression method from OJPEG to something else (issue #795).\n * OJPEG fix potential integer overflow/out-of-bounds access (issue #796).\n * ojpeg: prevent EOF infinite loop (fixes commit 2a3d55b)\n * fix null pointer deference in issue #782.\n * fix stack-overflow in issue #784.\n\n Other changes:\n\n * Change EXIF and GPS tag type from IFD8 to LONG8 per EXIF-specification (issue #739).\n * Harden integer size and offset calculations (issue #897)\n * TIFFComputeTile/TIFFComputeStrip: use overflow-checked multiplication\n * Move widening casts inside multiplication scope.\n * Lots of compiler warning fixes related to enabling more warning flags\n * Align writing and reading of TIFF_LONG8 and TIFF_IFD8 tags (issue #773)\n * TIFFFillStrip(): prevent harmless unsigned integer overflow\n","status":"published","published":"2026-07-10T08:42:17Z","modified":"2026-07-17T18:24:02.37211771Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:22796-1","title":"Security update for tiff","description":"This update for tiff fixes the following issues:\n\nUpdate to version 4.7.2.\n\nSecurity issues fixed:\n\n- CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779).\n- CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large SamplesPerPixel tag value\n  (bsc#1268434).\n\nOther updates and bugfixes:\n\n- Enable Lerc support in openSUSE (bsc#1257123).\n- Version 4.7.2:\n  - Software configuration changes:\n    * cmake: Fix bundle identifiers to use reverse-DNS format\n    * cmake: Fix and improve Apple framework build support\n    * cmake: Use TurboJPEG CONFIG by default (issue #767)\n    * cmake: changes related to 8-/12-bit modes\n    * cmake: Replace CMath::CMath with direct link to avoid export.\n    * Support for iOS-derived builds\n    * Simplify cmake byte order version check\n    * Add additional warnings, primarily floating precision conversions and integer arithmetic conversions\n    * configure.ac: Require bootstrap with at least Autoconf 2.71.\n  - Library changes:\n    * New/improved functionalities::\n    + Add TIFFGetMaxCompressionRatio() and use it in _TIFFReadEncoded[Tile|Strip)AndAllocBuffer() (issue #781)\n  - Bug fixes:\n    * Handle negative TIFFReadFile results before state updates (issue #854)\n    * tif_dirread.c: fix copy-paste bug in ChopUpSingleUncompressedStrip\n    * tif_read.c: Fixed division by zero in TIFFStartStrip() (issue #777)\n    * tif_dirwrite.c: add integer overflow checks to allocation size calculations\n    * tif_print.c: add integer overflow checks to allocation size calculations\n    * tif_write.c: fix OOB read and underflow in TIFFAppendToStrip copy loop\n    * DumpModeSeek: add bounds check to prevent OOB pointer advance\n    * TIFFGrowStrips: fix use-after-free on partial realloc failure.\n    * Fix NULL dereference in _TIFFReserveLargeEnoughWriteBuffer() by validating the strip bytecount array before\n      accessing it.\n    * TIFFRGBAImage: avoid int overflows in put functions (issue #830)\n    * tif_getimage: fix inconsistent fromskew handling in put16bitbwtile (issue #792)\n    * tif_getimage: Widen pointer-offset arithmetic in tif_getimage\n    * putcontig8bitYCbCr44tile: fix wrong fromskew computation (issue #798)\n    * putcontig8bitYCbCr42tile: Reject invalid YCbCr subsampling when image dimensions are smaller than the subsampling\n      block to prevent out-of-bounds writes. (issue #753)\n    * TIFFReadRGBAImage(): prevent integer overflow and later heap overflow (issue #787)\n    * TIFFFillStrip/Tile(): avoid excessive memory allocation (issue #831)\n    * TIFFLinkDirectory() checks for IFD loops (issue #788)\n    * Check result of _TIFFCheckRealloc to prevent memory leaks and segmentation fault when reallocation fails.\n    * TIFFVTileSize64(): in YCbCr contig non upsampled mode, validate td_samplesperpixel==3 (issue #805)\n    * TIFFReadDirEntryPersampleShort(): be tolerant to tags like SampleFormat not having 1 or SamplesPerPixel values\n      (https://github.com/OSGeo/gdal/issues/13465)\n    * tif_getimage: reject tile widths that would overflow toskew (issue #808)\n    * Fix integer overflow in _TIFFPartialReadStripArray on 32-bit.\n    * TIFFAppendToStrip(): add some checks to avoid null-pointer-dereferencing (issue #777).\n    * _TIFFGetStrileOffsetOrByteCountValue(): fix potential crash on corrupted files when file opened in 'O' mode\n      (https://issues.oss-fuzz.com/issues/471328917)\n    * TIFFReadDirectory(): re-set TIFF_LAZYSTRILELOAD if file opened in 'O' mode\n    * _TIFFMergeFields(): avoid NULL ptr dereference (issue #755).\n    * Check td_stripbytecount_p and td_stripoffset_p for NULL pointer before (re-)writing to file. (issue #749)\n    * JPEGDecodeRaw: initialize output buffer to avoid returning uninitialized memory (issue #892)\n    * JPEG decompressor: initialize output buffer when JPEG image is smaller than strile dimension to avoid heap memory\n      disclosure (issue #826)\n    * JPEG: fix generation of tiled 12-bit JPEG compressed files with libjpeg-turbo 3.0.3 (issue #773)\n    * JPEGDecode(): fix memory leak in error code path (https://issues.oss-fuzz.com/issues/471945501)\n    * tif_jpeg: reject mismatched JPEG data precision to avoid write overflow\n    * Fix signed left-shift UB in LogLuv RANDITHER encoding (issue #850)\n    * PixarLog: error out on invalid ABGR output buffer sizes.\n    * PixarLog: complete ABGR bounds check for multi-row strip decoding.\n    * PixarLog: fix heap-buffer-overflow in 8BITABGR decode with stride 3 (issue #824)\n    * PixarLog: fix undoing horizontal differencing when SamplesPerPixel != 3 and 4 (issue #789).\n    * PixarLog codec: fix potential integer overflow/out-of-bounds access (issue #797)\n    * TIFFAdvanceDirectory(): avoid potential read heap-buffer-overflow in mmap code path on 32 bit builds\n      (https://issues.oss-fuzz.com/issues/506737072)\n    * OJPEG: fix integer overflow in subsampling buffer allocation.\n    * OJPEG: fix nullptr deref when changing compression method from OJPEG to something else (issue #795).\n    * OJPEG fix potential integer overflow/out-of-bounds access (issue #796).\n    * ojpeg: prevent EOF infinite loop (fixes commit 2a3d55b)\n    * fix null pointer deference in issue #782.\n    * fix stack-overflow in issue #784.\n  - Other changes:\n    * Change EXIF and GPS tag type from IFD8 to LONG8 per EXIF-specification (issue #739).\n    * Harden integer size and offset calculations (issue #897)\n    * TIFFComputeTile/TIFFComputeStrip: use overflow-checked multiplication\n    * Move widening casts inside multiplication scope.\n    * Lots of compiler warning fixes related to enabling more warning flags\n    * Align writing and reading of TIFF_LONG8 and TIFF_IFD8 tags (issue #773)\n    * TIFFFillStrip(): prevent harmless unsigned integer overflow\n","status":"published","published":"2026-07-17T12:18:16Z","modified":"2026-07-28T18:24:05.291380049Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:22886-1","title":"Security update for tiff","description":"This update for tiff fixes the following issues\n\nUpdate to version 4.7.2.\n\nSecurity issues fixed:\n\n- CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779).\n- CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large SamplesPerPixel tag value\n  (bsc#1268434).\n\nOther updates and bugfixes:\n\n- Enable Lerc support in openSUSE (bsc#1257123).\n- Version 4.7.2:\n  - Software configuration changes:\n    * cmake: Fix bundle identifiers to use reverse-DNS format\n    * cmake: Fix and improve Apple framework build support\n    * cmake: Use TurboJPEG CONFIG by default (issue #767)\n    * cmake: changes related to 8-/12-bit modes\n    * cmake: Replace CMath::CMath with direct link to avoid export.\n    * Support for iOS-derived builds\n    * Simplify cmake byte order version check\n    * Add additional warnings, primarily floating precision conversions and integer arithmetic conversions\n    * configure.ac: Require bootstrap with at least Autoconf 2.71.\n  - Library changes:\n    * New/improved functionalities::\n    + Add TIFFGetMaxCompressionRatio() and use it in _TIFFReadEncoded[Tile|Strip)AndAllocBuffer() (issue #781)\n  - Bug fixes:\n    * Handle negative TIFFReadFile results before state updates (issue #854)\n    * tif_dirread.c: fix copy-paste bug in ChopUpSingleUncompressedStrip\n    * tif_read.c: Fixed division by zero in TIFFStartStrip() (issue #777)\n    * tif_dirwrite.c: add integer overflow checks to allocation size calculations\n    * tif_print.c: add integer overflow checks to allocation size calculations\n    * tif_write.c: fix OOB read and underflow in TIFFAppendToStrip copy loop\n    * DumpModeSeek: add bounds check to prevent OOB pointer advance\n    * TIFFGrowStrips: fix use-after-free on partial realloc failure.\n    * Fix NULL dereference in _TIFFReserveLargeEnoughWriteBuffer() by validating the strip bytecount array before\n      accessing it.\n    * TIFFRGBAImage: avoid int overflows in put functions (issue #830)\n    * tif_getimage: fix inconsistent fromskew handling in put16bitbwtile (issue #792)\n    * tif_getimage: Widen pointer-offset arithmetic in tif_getimage\n    * putcontig8bitYCbCr44tile: fix wrong fromskew computation (issue #798)\n    * putcontig8bitYCbCr42tile: Reject invalid YCbCr subsampling when image dimensions are smaller than the subsampling\n      block to prevent out-of-bounds writes. (issue #753)\n    * TIFFReadRGBAImage(): prevent integer overflow and later heap overflow (issue #787)\n    * TIFFFillStrip/Tile(): avoid excessive memory allocation (issue #831)\n    * TIFFLinkDirectory() checks for IFD loops (issue #788)\n    * Check result of _TIFFCheckRealloc to prevent memory leaks and segmentation fault when reallocation fails.\n    * TIFFVTileSize64(): in YCbCr contig non upsampled mode, validate td_samplesperpixel==3 (issue #805)\n    * TIFFReadDirEntryPersampleShort(): be tolerant to tags like SampleFormat not having 1 or SamplesPerPixel values\n      (https://github.com/OSGeo/gdal/issues/13465)\n    * tif_getimage: reject tile widths that would overflow toskew (issue #808)\n    * Fix integer overflow in _TIFFPartialReadStripArray on 32-bit.\n    * TIFFAppendToStrip(): add some checks to avoid null-pointer-dereferencing (issue #777).\n    * _TIFFGetStrileOffsetOrByteCountValue(): fix potential crash on corrupted files when file opened in 'O' mode\n      (https://issues.oss-fuzz.com/issues/471328917)\n    * TIFFReadDirectory(): re-set TIFF_LAZYSTRILELOAD if file opened in 'O' mode\n    * _TIFFMergeFields(): avoid NULL ptr dereference (issue #755).\n    * Check td_stripbytecount_p and td_stripoffset_p for NULL pointer before (re-)writing to file. (issue #749)\n    * JPEGDecodeRaw: initialize output buffer to avoid returning uninitialized memory (issue #892)\n    * JPEG decompressor: initialize output buffer when JPEG image is smaller than strile dimension to avoid heap memory\n      disclosure (issue #826)\n    * JPEG: fix generation of tiled 12-bit JPEG compressed files with libjpeg-turbo 3.0.3 (issue #773)\n    * JPEGDecode(): fix memory leak in error code path (https://issues.oss-fuzz.com/issues/471945501)\n    * tif_jpeg: reject mismatched JPEG data precision to avoid write overflow\n    * Fix signed left-shift UB in LogLuv RANDITHER encoding (issue #850)\n    * PixarLog: error out on invalid ABGR output buffer sizes.\n    * PixarLog: complete ABGR bounds check for multi-row strip decoding.\n    * PixarLog: fix heap-buffer-overflow in 8BITABGR decode with stride 3 (issue #824)\n    * PixarLog: fix undoing horizontal differencing when SamplesPerPixel != 3 and 4 (issue #789).\n    * PixarLog codec: fix potential integer overflow/out-of-bounds access (issue #797)\n    * TIFFAdvanceDirectory(): avoid potential read heap-buffer-overflow in mmap code path on 32 bit builds\n      (https://issues.oss-fuzz.com/issues/506737072)\n    * OJPEG: fix integer overflow in subsampling buffer allocation.\n    * OJPEG: fix nullptr deref when changing compression method from OJPEG to something else (issue #795).\n    * OJPEG fix potential integer overflow/out-of-bounds access (issue #796).\n    * ojpeg: prevent EOF infinite loop (fixes commit 2a3d55b)\n    * fix null pointer deference in issue #782.\n    * fix stack-overflow in issue #784.\n  - Other changes:\n    * Change EXIF and GPS tag type from IFD8 to LONG8 per EXIF-specification (issue #739).\n    * Harden integer size and offset calculations (issue #897)\n    * TIFFComputeTile/TIFFComputeStrip: use overflow-checked multiplication\n    * Move widening casts inside multiplication scope.\n    * Lots of compiler warning fixes related to enabling more warning flags\n    * Align writing and reading of TIFF_LONG8 and TIFF_IFD8 tags (issue #773)\n    * TIFFFillStrip(): prevent harmless unsigned integer overflow\n","status":"published","published":"2026-07-21T16:29:11Z","modified":"2026-07-28T18:24:13.660682806Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:2853-1","title":"Security update for tiff","description":"This update for tiff fixes the following issues:\n\nUpdate to version 4.7.2.\n\nSecurity issues fixed:\n\n- CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779).\n- CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large SamplesPerPixel tag value\n  (bsc#1268434).\n\nOther updates and bugfixes:\n\n- Version 4.7.2:\n  - Software configuration changes:\n    * cmake: Fix bundle identifiers to use reverse-DNS format\n    * cmake: Fix and improve Apple framework build support\n    * cmake: Use TurboJPEG CONFIG by default (issue #767)\n    * cmake: changes related to 8-/12-bit modes\n    * cmake: Replace CMath::CMath with direct link to avoid export.\n    * Support for iOS-derived builds\n    * Simplify cmake byte order version check\n    * Add additional warnings, primarily floating precision conversions and integer arithmetic conversions\n    * configure.ac: Require bootstrap with at least Autoconf 2.71.\n  - Library changes:\n    * New/improved functionalities::\n    + Add TIFFGetMaxCompressionRatio() and use it in _TIFFReadEncoded[Tile|Strip)AndAllocBuffer() (issue #781)\n  - Bug fixes:\n    * Handle negative TIFFReadFile results before state updates (issue #854)\n    * tif_dirread.c: fix copy-paste bug in ChopUpSingleUncompressedStrip\n    * tif_read.c: Fixed division by zero in TIFFStartStrip() (issue #777)\n    * tif_dirwrite.c: add integer overflow checks to allocation size calculations\n    * tif_print.c: add integer overflow checks to allocation size calculations\n    * tif_write.c: fix OOB read and underflow in TIFFAppendToStrip copy loop\n    * DumpModeSeek: add bounds check to prevent OOB pointer advance\n    * TIFFGrowStrips: fix use-after-free on partial realloc failure.\n    * Fix NULL dereference in _TIFFReserveLargeEnoughWriteBuffer() by validating the strip bytecount array before\n      accessing it.\n    * TIFFRGBAImage: avoid int overflows in put functions (issue #830)\n    * tif_getimage: fix inconsistent fromskew handling in put16bitbwtile (issue #792)\n    * tif_getimage: Widen pointer-offset arithmetic in tif_getimage\n    * putcontig8bitYCbCr44tile: fix wrong fromskew computation (issue #798)\n    * putcontig8bitYCbCr42tile: Reject invalid YCbCr subsampling when image dimensions are smaller than the subsampling\n      block to prevent out-of-bounds writes. (issue #753)\n    * TIFFReadRGBAImage(): prevent integer overflow and later heap overflow (issue #787)\n    * TIFFFillStrip/Tile(): avoid excessive memory allocation (issue #831)\n    * TIFFLinkDirectory() checks for IFD loops (issue #788)\n    * Check result of _TIFFCheckRealloc to prevent memory leaks and segmentation fault when reallocation fails.\n    * TIFFVTileSize64(): in YCbCr contig non upsampled mode, validate td_samplesperpixel==3 (issue #805)\n    * TIFFReadDirEntryPersampleShort(): be tolerant to tags like SampleFormat not having 1 or SamplesPerPixel values\n      (https://github.com/OSGeo/gdal/issues/13465)\n    * tif_getimage: reject tile widths that would overflow toskew (issue #808)\n    * Fix integer overflow in _TIFFPartialReadStripArray on 32-bit.\n    * TIFFAppendToStrip(): add some checks to avoid null-pointer-dereferencing (issue #777).\n    * _TIFFGetStrileOffsetOrByteCountValue(): fix potential crash on corrupted files when file opened in 'O' mode\n      (https://issues.oss-fuzz.com/issues/471328917)\n    * TIFFReadDirectory(): re-set TIFF_LAZYSTRILELOAD if file opened in 'O' mode\n    * _TIFFMergeFields(): avoid NULL ptr dereference (issue #755).\n    * Check td_stripbytecount_p and td_stripoffset_p for NULL pointer before (re-)writing to file. (issue #749)\n    * JPEGDecodeRaw: initialize output buffer to avoid returning uninitialized memory (issue #892)\n    * JPEG decompressor: initialize output buffer when JPEG image is smaller than strile dimension to avoid heap memory\n      disclosure (issue #826)\n    * JPEG: fix generation of tiled 12-bit JPEG compressed files with libjpeg-turbo 3.0.3 (issue #773)\n    * JPEGDecode(): fix memory leak in error code path (https://issues.oss-fuzz.com/issues/471945501)\n    * tif_jpeg: reject mismatched JPEG data precision to avoid write overflow\n    * Fix signed left-shift UB in LogLuv RANDITHER encoding (issue #850)\n    * PixarLog: error out on invalid ABGR output buffer sizes.\n    * PixarLog: complete ABGR bounds check for multi-row strip decoding.\n    * PixarLog: fix heap-buffer-overflow in 8BITABGR decode with stride 3 (issue #824)\n    * PixarLog: fix undoing horizontal differencing when SamplesPerPixel != 3 and 4 (issue #789).\n    * PixarLog codec: fix potential integer overflow/out-of-bounds access (issue #797)\n    * TIFFAdvanceDirectory(): avoid potential read heap-buffer-overflow in mmap code path on 32 bit builds\n      (https://issues.oss-fuzz.com/issues/506737072)\n    * OJPEG: fix integer overflow in subsampling buffer allocation.\n    * OJPEG: fix nullptr deref when changing compression method from OJPEG to something else (issue #795).\n    * OJPEG fix potential integer overflow/out-of-bounds access (issue #796).\n    * ojpeg: prevent EOF infinite loop (fixes commit 2a3d55b)\n    * fix null pointer deference in issue #782.\n    * fix stack-overflow in issue #784.\n  - Other changes:\n    * Change EXIF and GPS tag type from IFD8 to LONG8 per EXIF-specification (issue #739).\n    * Harden integer size and offset calculations (issue #897)\n    * TIFFComputeTile/TIFFComputeStrip: use overflow-checked multiplication\n    * Move widening casts inside multiplication scope.\n    * Lots of compiler warning fixes related to enabling more warning flags\n    * Align writing and reading of TIFF_LONG8 and TIFF_IFD8 tags (issue #773)\n    * TIFFFillStrip(): prevent harmless unsigned integer overflow\n","status":"published","published":"2026-07-10T17:54:44Z","modified":"2026-07-13T18:24:55.720580465Z","updated_at":"2026-11-02T15:54:04.987808Z"}]},"sources_more":{"osv":2}}