Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2026-12588

Высокий

ALT-PU-2026-12588: package libtiff update to version 4.7.2-alt1

Источник
errata.altlinux.org
Дата публикации
12.08.2026
Дата обновления
12.08.2026
Устраненные уязвимости
2

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades libtiff to version 4.7.2-alt1.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 7.8
ubuntu
8 месяцев назад

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

CVSS3: 7.8
redhat
8 месяцев назад

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

CVSS3: 7.8
nvd
8 месяцев назад

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

CVSS3: 7.8
msrc
8 месяцев назад

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

CVSS3: 7.8
debian
8 месяцев назад

A flaw was found in the libtiff library. A remote attacker could explo ...