CVE-2026-52490

Опубликовано: 24 авг. 2026

Источник: redhat

CVSS3: 7.3

EPSS Низкий

Описание

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c

A flaw was found in libtiff. An attacker can exploit a vulnerability in the process_command_opts() function within tools/tiffcrop.c to execute arbitrary code. This could lead to a complete compromise of the affected system.

Меры по смягчению последствий

Avoid using the tiffcrop utility to process TIFF image files from untrusted sources. If the libtiff-tools package, which provides tiffcrop, is not required, consider removing it to prevent exploitation.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 10	libtiff	Affected
Red Hat Enterprise Linux 6	libtiff	Out of support scope
Red Hat Enterprise Linux 7	compat-libtiff3	Affected
Red Hat Enterprise Linux 7	libtiff	Affected
Red Hat Enterprise Linux 8	compat-libtiff3	Affected
Red Hat Enterprise Linux 8	libtiff	Affected
Red Hat Enterprise Linux 8	mingw-libtiff	Affected
Red Hat Enterprise Linux 9	libtiff	Affected
Red Hat Hardened Images	libtiff-main-4.7.2-2.hum1	Fixed	RHSA-2026:53467	11.08.2026

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Important

Дефект:

CWE-78

https://bugzilla.redhat.com/show_bug.cgi?id=2523148libtiff: libtiff: Arbitrary code execution via process_command_opts() function

EPSS

Процентиль: 34%

0.00403

Низкий

7.3 High

CVSS3

Связанные уязвимости

CVE-2026-52490

CVSS3: 9.8

ubuntu

14 дней назад

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c

CVE-2026-52490

CVSS3: 9.8

nvd

14 дней назад

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c

CVE-2026-52490

msrc

11 дней назад

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c

CVE-2026-52490

CVSS3: 9.8

debian

14 дней назад

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an ...

GHSA-6qm2-q5vx-rh4c

CVSS3: 9.8

github

14 дней назад

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c

EPSS

Процентиль: 34%

0.00403

Низкий

7.3 High

CVSS3