Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-4775

Опубликовано: 24 мар. 2026
Источник: nvd
CVSS3: 7.8
EPSS Низкий

Описание

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:libtiff:libtiff:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:hardened_images:-:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 42%
0.00553
Низкий

7.8 High

CVSS3

Дефекты

CWE-190
CWE-190

Связанные уязвимости

CVSS3: 7.8
ubuntu
4 месяца назад

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

CVSS3: 7.8
redhat
4 месяца назад

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

CVSS3: 7.8
msrc
4 месяца назад

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

CVSS3: 7.8
debian
4 месяца назад

A flaw was found in the libtiff library. A remote attacker could explo ...

suse-cvrf
2 месяца назад

Security update for tiff

EPSS

Процентиль: 42%
0.00553
Низкий

7.8 High

CVSS3

Дефекты

CWE-190
CWE-190