CVE-2026-52490

Опубликовано: 24 авг. 2026

Источник: debian

EPSS Низкий

Описание

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
tiff	fixed	4.7.2-1		package

Примечания

https://gitlab.com/libtiff/libtiff/-/work_items/846
Fixed by: https://gitlab.com/libtiff/libtiff/-/commit/b04e935cb6242f22cc8b63c99a372cf3ea825e4e (v4.7.2rc2)

EPSS

Процентиль: 34%

0.00403

Низкий

Связанные уязвимости

CVE-2026-52490

CVSS3: 9.8

ubuntu

14 дней назад

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c

CVE-2026-52490

CVSS3: 7.3

redhat

14 дней назад

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c

CVE-2026-52490

CVSS3: 9.8

nvd

14 дней назад

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c

CVE-2026-52490

msrc

11 дней назад

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c

GHSA-6qm2-q5vx-rh4c

CVSS3: 9.8

github

14 дней назад

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c

EPSS

Процентиль: 34%

0.00403

Низкий