VDB
RHSA-2026:74463
RHSA-2026:74463
PUBLISHED
CVSS 7.699999809265137 HIGH
An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.
Risk Scores
CVSS 3.1
7.699999809265137
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/rhai/base-image-rocm-rhel9@sha256:44cae045bc077bc818690abc6ebadc9b81aab015c0b4b5ed07ea07e6333f2bbf_amd64 as a component of Red Hat OpenShift AI 3.2 | * |
Timeline
- Oct 1, 2026 CVE Published
- Oct 8, 2026 CVE Updated
- Oct 8, 2026 Distribution Patch
- Oct 8, 2026 Distribution Patch
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:74463 advisory
- https://access.redhat.com/security/cve/CVE-2023-52355 advisory
- https://access.redhat.com/security/cve/CVE-2025-6170 advisory
- https://access.redhat.com/security/cve/CVE-2026-11822 advisory
- https://access.redhat.com/security/cve/CVE-2026-11824 advisory
- https://access.redhat.com/security/cve/CVE-2026-11940 advisory
- https://access.redhat.com/security/cve/CVE-2026-12912 advisory
- https://access.redhat.com/security/cve/CVE-2026-14164 advisory
- https://access.redhat.com/security/cve/CVE-2026-15308 advisory
- https://access.redhat.com/security/cve/CVE-2026-15588 advisory
- https://access.redhat.com/security/cve/CVE-2026-16118 advisory
- https://access.redhat.com/security/cve/CVE-2026-29111 advisory
- https://access.redhat.com/security/cve/CVE-2026-41142 advisory
- https://access.redhat.com/security/cve/CVE-2026-41989 advisory
- https://access.redhat.com/security/cve/CVE-2026-42216 advisory
- https://access.redhat.com/security/cve/CVE-2026-44431 advisory
- https://access.redhat.com/security/cve/CVE-2026-44432 advisory
- https://access.redhat.com/security/cve/CVE-2026-47162 advisory
- https://access.redhat.com/security/cve/CVE-2026-47167 advisory
- https://access.redhat.com/security/cve/CVE-2026-48864 advisory
…and 255 more