Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

CVE-2026-4775

high

A flaw was found in the libtiff library.

Vendor / product: Libtiff — libtiff

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

CVSS
7.8
7.8 (CVSS v3.1)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity source: NVD CVSS v3.1 (secalert@redhat.com)
Timeline (UTC)
Published: 2026-03-24 15:16
Modified: 2026-11-04 23:17
NVD status: Analyzed
Last synced 1 hour ago
Verified against the source API 2026-11-04 23:38 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

libtiff / libtiff <4.7.2
debian / debian_linux 11.0
redhat / ai_inference_server ≥3.2.0 <3.2.2, ≥3.3.0 <3.3.5
redhat / codeready_linux_builder 8.0, 9.0, 10.0
redhat / codeready_linux_builder_eus 9.4, 9.6, 10.0
redhat / hardened_images all versions
redhat / openshift_ai ≥3.4 <3.4.3
redhat / enterprise_linux 6.0, 8.0, 9.0, 10.0
redhat / enterprise_linux_els 7.0
redhat / enterprise_linux_eus 8.4, 9.4, 9.6, 10.0
redhat / enterprise_linux_server_aus 8.4, 8.6
redhat / enterprise_linux_server_tus 8.6, 8.8
redhat / enterprise_linux_update_services_for_sap_solutions 8.6, 8.8, 9.0, 9.2

Weakness classification (CWE)

CWE-190

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

Vendor advisory: https://access.redhat.com/errata/RHSA-2026:12265
Vendor advisory: https://access.redhat.com/errata/RHSA-2026:12271
Vendor advisory: https://access.redhat.com/errata/RHSA-2026:14929
Vendor advisory: https://access.redhat.com/errata/RHSA-2026:16055
Vendor advisory: https://access.redhat.com/errata/RHSA-2026:19150
Vendor advisory: https://access.redhat.com/errata/RHSA-2026:19363
Vendor advisory: https://access.redhat.com/errata/RHSA-2026:19585
Vendor advisory: https://access.redhat.com/errata/RHSA-2026:19586
Vendor advisory: https://access.redhat.com/errata/RHSA-2026:19604
Vendor advisory: https://access.redhat.com/errata/RHSA-2026:19608

References

Data sources

NVD CVE API 2.0 — fetched 2026-11-04 23:38 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores

Related CVEs

CVE-2023-1916CVE-2022-1354CVE-2023-52356