Summary
The libtiff package contains a library of functions for manipulating TIFF (Tagged Image File Format) image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if you need to manipulate TIFF format image files.
Security Fix(es):
* libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | mingw32-libtiff | 4.0.9-4.el8_10 |
| AlmaLinux · 8 | mingw32-libtiff-static | 4.0.9-4.el8_10 |
| AlmaLinux · 8 | mingw64-libtiff | 4.0.9-4.el8_10 |
| AlmaLinux · 8 | mingw64-libtiff-static | 4.0.9-4.el8_10 |
Vulnerabilities 1
-
High 7.8
Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing
A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to inco…