VDB

RHSA-2026:50774

RHSA-2026:50774 PUBLISHED CVSS 7.300000190734863 HIGH

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).

Risk Scores

CVSS 3.1
7.300000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Red Hatlibtiff-tools-debuginfo-0:4.4.0-13.el9_6.6.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:4.4.0-13.el9_6.6
Red Hatlibtiff-tools-debuginfo-0:4.4.0-13.el9_6.6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)0:4.4.0-13.el9_6.6
Red Hatlibtiff-debugsource-0:4.4.0-13.el9_6.6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:4.4.0-13.el9_6.6
Red Hatlibtiff-debuginfo-0:4.4.0-13.el9_6.6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)0:4.4.0-13.el9_6.6
Red Hatlibtiff-tools-0:4.4.0-13.el9_6.6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)0:4.4.0-13.el9_6.6
Red Hatlibtiff-tools-debuginfo-0:4.4.0-13.el9_6.6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:4.4.0-13.el9_6.6
Red Hatlibtiff-tools-debuginfo-0:4.4.0-13.el9_6.6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:4.4.0-13.el9_6.6
Red Hatlibtiff-tools-debuginfo-0:4.4.0-13.el9_6.6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:4.4.0-13.el9_6.6
Red Hatlibtiff-debugsource-0:4.4.0-13.el9_6.6.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:4.4.0-13.el9_6.6
Red Hatlibtiff-debuginfo-0:4.4.0-13.el9_6.6.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:4.4.0-13.el9_6.6
Red Hatlibtiff-0:4.4.0-13.el9_6.6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:4.4.0-13.el9_6.6
Red Hatlibtiff-0:4.4.0-13.el9_6.6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:4.4.0-13.el9_6.6
Red Hatlibtiff-debuginfo-0:4.4.0-13.el9_6.6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:4.4.0-13.el9_6.6
Red Hatlibtiff-debuginfo-0:4.4.0-13.el9_6.6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:4.4.0-13.el9_6.6
Red Hatlibtiff-debugsource-0:4.4.0-13.el9_6.6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)0:4.4.0-13.el9_6.6
Red Hatlibtiff-tools-0:4.4.0-13.el9_6.6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)0:4.4.0-13.el9_6.6
Red Hatlibtiff-debuginfo-0:4.4.0-13.el9_6.6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)0:4.4.0-13.el9_6.6
Red Hatlibtiff-devel-0:4.4.0-13.el9_6.6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:4.4.0-13.el9_6.6
Red Hatlibtiff-debugsource-0:4.4.0-13.el9_6.6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)0:4.4.0-13.el9_6.6
Red Hatlibtiff-debugsource-0:4.4.0-13.el9_6.6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)0:4.4.0-13.el9_6.6

…and 22 more

Timeline

  • Aug 5, 2026 CVE Published
  • Aug 5, 2026 CVE Updated
  • Aug 5, 2026 Distribution Patch
  • Aug 5, 2026 Distribution Patch
  • Aug 5, 2026 Security Advisory
  • Aug 5, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›