CVE-2026-52491

Опубликовано: 25 авг. 2026

Источник: debian

EPSS Низкий

Описание

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main() component

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
tiff	fixed	4.7.2-1		package

Примечания

Fixed by: https://gitlab.com/libtiff/libtiff/-/commit/9ce4d089bcf25496663776d9e6336738112f09a3 (v4.7.2rc2)
thumbnail not included in Debian binary packages

EPSS

Процентиль: 4%

0.0014

Низкий

Связанные уязвимости

CVE-2026-52491

CVSS3: 8.4

ubuntu

13 дней назад

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main() component

CVE-2026-52491

CVSS3: 7.3

redhat

13 дней назад

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main() component

CVE-2026-52491

CVSS3: 8.4

nvd

13 дней назад

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main() component

CVE-2026-52491

msrc

9 дней назад

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main() component

GHSA-28v3-93mm-ccfv

CVSS3: 8.4

github

13 дней назад

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main() component

EPSS

Процентиль: 4%

0.0014

Низкий