VDB
RHSA-2026:74460
RHSA-2026:74460
PUBLISHED
CVSS 7.699999809265137 HIGH
An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.
Risk Scores
CVSS 3.1
7.699999809265137
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/rhai/base-image-cpu-rhel9@sha256:3ec2cdbbaf5672eb1b0c60e7bf40d54e82783204e7751f21b04b78bbcef2ac7d_arm64 as a component of Red Hat OpenShift AI 3.2 | * |
| Red Hat | registry.redhat.io/rhai/base-image-cpu-rhel9@sha256:c7d43d3a49c7c235ec31917cc45b88807703082e9ff04236576ea387da3d0ae6_s390x as a component of Red Hat OpenShift AI 3.2 | * |
| Red Hat | registry.redhat.io/rhai/base-image-cpu-rhel9@sha256:e36e6b04e679487d1a6e1c60a796c6e3862e037c06822260492b65c4205a21ea_amd64 as a component of Red Hat OpenShift AI 3.2 | * |
| Red Hat | registry.redhat.io/rhai/base-image-cpu-rhel9@sha256:d23fba3a5506149bdd2ce57d6031a47989c174a6149080496645cda077cb853a_ppc64le as a component of Red Hat OpenShift AI 3.2 | * |
Timeline
- Oct 1, 2026 CVE Published
- Oct 8, 2026 CVE Updated
- Oct 8, 2026 Distribution Patch
- Oct 8, 2026 Distribution Patch
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:74460 advisory
- https://access.redhat.com/security/cve/CVE-2023-52355 advisory
- https://access.redhat.com/security/cve/CVE-2025-6170 advisory
- https://access.redhat.com/security/cve/CVE-2026-11822 advisory
- https://access.redhat.com/security/cve/CVE-2026-11824 advisory
- https://access.redhat.com/security/cve/CVE-2026-11940 advisory
- https://access.redhat.com/security/cve/CVE-2026-12912 advisory
- https://access.redhat.com/security/cve/CVE-2026-14164 advisory
- https://access.redhat.com/security/cve/CVE-2026-15308 advisory
- https://access.redhat.com/security/cve/CVE-2026-15588 advisory
- https://access.redhat.com/security/cve/CVE-2026-16118 advisory
- https://access.redhat.com/security/cve/CVE-2026-29111 advisory
- https://access.redhat.com/security/cve/CVE-2026-41142 advisory
- https://access.redhat.com/security/cve/CVE-2026-41989 advisory
- https://access.redhat.com/security/cve/CVE-2026-42216 advisory
- https://access.redhat.com/security/cve/CVE-2026-44431 advisory
- https://access.redhat.com/security/cve/CVE-2026-44432 advisory
- https://access.redhat.com/security/cve/CVE-2026-47162 advisory
- https://access.redhat.com/security/cve/CVE-2026-47167 advisory
- https://access.redhat.com/security/cve/CVE-2026-48864 advisory
…and 255 more