Yüksek CVSS 7.8
CVE-2026-4775: Libtiff: tamsayı taşması
Açıklama (NVD)
A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.
Özet bilgiler
- Ürün
- Libtiff Libtiff
- CVSS v3.1
- 7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS
- %0,57 (yüzdelik 47)
- CWE
- CWE-190
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| libtiff-libtiff | — | — | 4.7.2 |
| debian-debian-linux | 11.0 | 11.0 | — |
| redhat-ai-inference-server | 3.2.0 | — | 3.2.2 |
| redhat-ai-inference-server | 3.3.0 | — | 3.3.5 |
| redhat-codeready-linux-builder | 8.0 | 8.0 | — |
| redhat-codeready-linux-builder | 9.0 | 9.0 | — |
| redhat-codeready-linux-builder | 10.0 | 10.0 | — |
| redhat-codeready-linux-builder-eus | 9.4 | 9.4 | — |
| redhat-codeready-linux-builder-eus | 9.6 | 9.6 | — |
| redhat-codeready-linux-builder-eus | 10.0 | 10.0 | — |
| redhat-hardened-images | — | — | — |
| redhat-openshift-ai | 3.4 | — | 3.4.3 |
| redhat-enterprise-linux | 6.0 | 6.0 | — |
| redhat-enterprise-linux | 8.0 | 8.0 | — |
| redhat-enterprise-linux | 9.0 | 9.0 | — |
| redhat-enterprise-linux | 10.0 | 10.0 | — |
| redhat-enterprise-linux-els | 7.0 | 7.0 | — |
| redhat-enterprise-linux-eus | 8.4 | 8.4 | — |
| redhat-enterprise-linux-eus | 9.4 | 9.4 | — |
| redhat-enterprise-linux-eus | 9.6 | 9.6 | — |
| redhat-enterprise-linux-eus | 10.0 | 10.0 | — |
| redhat-enterprise-linux-server-aus | 8.4 | 8.4 | — |
| redhat-enterprise-linux-server-aus | 8.6 | 8.6 | — |
| redhat-enterprise-linux-server-tus | 8.6 | 8.6 | — |
| redhat-enterprise-linux-server-tus | 8.8 | 8.8 | — |
| redhat-enterprise-linux-update-services-for-sap-solutions | 8.6 | 8.6 | — |
| redhat-enterprise-linux-update-services-for-sap-solutions | 8.8 | 8.8 | — |
| redhat-enterprise-linux-update-services-for-sap-solutions | 9.0 | 9.0 | — |
| redhat-enterprise-linux-update-services-for-sap-solutions | 9.2 | 9.2 | — |
Kaynaklar
- NVD kaydı
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- CWE-190