Description

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

INFO

Published Date :

2026-03-24T14:42:47.529Z

Last Modified :

2026-05-07T21:24:46.165Z

Source :

redhat
AFFECTED PRODUCTS

The following products are affected by CVE-2026-4775 vulnerability.

Vendors Products
Debian
  • Debian Linux
Libtiff
  • Libtiff
Redhat
  • Enterprise Linux
  • Hardened Images
  • Hummingbird
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-4775.

URL Resource
https://access.redhat.com/errata/RHSA-2026:12265 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:12271 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:14929 cve-icon cve-icon
https://access.redhat.com/security/cve/CVE-2026-4775 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2450768 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2026/04/msg00016.html cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-4775 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-4775 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact