Описание
An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main() component
A flaw was found in libtiff. An attacker could exploit this vulnerability by processing a specially crafted file, leading to arbitrary code execution. This issue occurs within the thumbnail.c: main() component. Successful exploitation could allow the attacker to take control of the affected system.
Отчет
This vulnerability is rated as Important because successful exploitation can allow arbitrary code execution within the security context of the executing user. The defect is confined to the standalone thumbnail binary rather than the core libtiff shared library. As a result, applications linking against libtiff are not exposed, limiting the risk to environments where the command-line tool processes untrusted image files.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | libtiff | Not affected | ||
| Red Hat Enterprise Linux 6 | libtiff | Out of support scope | ||
| Red Hat Enterprise Linux 7 | compat-libtiff3 | Not affected | ||
| Red Hat Enterprise Linux 7 | libtiff | Not affected | ||
| Red Hat Enterprise Linux 8 | compat-libtiff3 | Not affected | ||
| Red Hat Enterprise Linux 8 | libtiff | Not affected | ||
| Red Hat Enterprise Linux 8 | mingw-libtiff | Not affected | ||
| Red Hat Enterprise Linux 9 | libtiff | Not affected | ||
| Red Hat Hardened Images | libtiff-main-4.7.2-2.hum1 | Fixed | RHSA-2026:53467 | 11.08.2026 |
Показывать по
Дополнительная информация
Статус:
EPSS
7.3 High
CVSS3
Связанные уязвимости
An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main() component
An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main() component
An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main() component
An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an ...
EPSS
7.3 High
CVSS3