VDB
RHSA-2026:74461
RHSA-2026:74461
PUBLISHED
CVSS 7.699999809265137 HIGH
An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.
Risk Scores
CVSS 3.1
7.699999809265137
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/rhai/base-image-spyre-rhel9@sha256:4ec36351b4c448cff458dcd3f9f7b72a9f9fa8c373d409c42c0cb6e99d24602f_s390x as a component of Red Hat OpenShift AI 3.2 | * |
| Red Hat | registry.redhat.io/rhai/base-image-spyre-rhel9@sha256:07985155eb6ca932da5c68fc2ec29c2fe0925dfd54bbea367170346b41d4a4e8_amd64 as a component of Red Hat OpenShift AI 3.2 | * |
| Red Hat | registry.redhat.io/rhai/base-image-spyre-rhel9@sha256:88d3fab5d8a9feff5e56138699b928f1d0f9a900194a303efc04e45904e1c0fa_ppc64le as a component of Red Hat OpenShift AI 3.2 | * |
Timeline
- Oct 1, 2026 CVE Published
- Oct 8, 2026 CVE Updated
- Oct 8, 2026 Distribution Patch
- Oct 8, 2026 Distribution Patch
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:74461 advisory
- https://access.redhat.com/security/cve/CVE-2023-52355 advisory
- https://access.redhat.com/security/cve/CVE-2025-6170 advisory
- https://access.redhat.com/security/cve/CVE-2026-11822 advisory
- https://access.redhat.com/security/cve/CVE-2026-11824 advisory
- https://access.redhat.com/security/cve/CVE-2026-11940 advisory
- https://access.redhat.com/security/cve/CVE-2026-12912 advisory
- https://access.redhat.com/security/cve/CVE-2026-14164 advisory
- https://access.redhat.com/security/cve/CVE-2026-15308 advisory
- https://access.redhat.com/security/cve/CVE-2026-15588 advisory
- https://access.redhat.com/security/cve/CVE-2026-16118 advisory
- https://access.redhat.com/security/cve/CVE-2026-29111 advisory
- https://access.redhat.com/security/cve/CVE-2026-41142 advisory
- https://access.redhat.com/security/cve/CVE-2026-41989 advisory
- https://access.redhat.com/security/cve/CVE-2026-42216 advisory
- https://access.redhat.com/security/cve/CVE-2026-44431 advisory
- https://access.redhat.com/security/cve/CVE-2026-44432 advisory
- https://access.redhat.com/security/cve/CVE-2026-47162 advisory
- https://access.redhat.com/security/cve/CVE-2026-47167 advisory
- https://access.redhat.com/security/cve/CVE-2026-48864 advisory
…and 255 more