Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-12912

Опубликовано: 29 июн. 2026
Источник: nvd
CVSS3: 7.3
EPSS Низкий

Описание

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).

EPSS

Процентиль: 14%
0.00232
Низкий

7.3 High

CVSS3

Дефекты

CWE-122
CWE-122

Связанные уязвимости

CVSS3: 7.3
ubuntu
около 1 месяца назад

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).

CVSS3: 7.3
redhat
4 месяца назад

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).

CVSS3: 7.3
msrc
28 дней назад

Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image

CVSS3: 7.3
debian
около 1 месяца назад

A flaw was found in libtiff. A remote attacker could exploit this vuln ...

rocky
9 дней назад

Important: libtiff security update

EPSS

Процентиль: 14%
0.00232
Низкий

7.3 High

CVSS3

Дефекты

CWE-122
CWE-122