high7.3
CVE-2026-12912
A flaw was found in libtiff.
Impact
A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/errata/RHSA-2026:34890
- https://access.redhat.com/errata/RHSA-2026:41892
- https://access.redhat.com/errata/RHSA-2026:42668
- https://access.redhat.com/errata/RHSA-2026:47183
- https://access.redhat.com/errata/RHSA-2026:47184
- https://access.redhat.com/errata/RHSA-2026:49671
- https://access.redhat.com/errata/RHSA-2026:50774
- https://access.redhat.com/errata/RHSA-2026:54638
- https://access.redhat.com/errata/RHSA-2026:54640
- https://access.redhat.com/errata/RHSA-2026:54642
- https://access.redhat.com/errata/RHSA-2026:58545
- https://access.redhat.com/errata/RHSA-2026:58553
- https://access.redhat.com/errata/RHSA-2026:58554
- https://access.redhat.com/errata/RHSA-2026:58556
- https://access.redhat.com/errata/RHSA-2026:61657
- https://access.redhat.com/errata/RHSA-2026:69292
- https://access.redhat.com/errata/RHSA-2026:73909
- https://access.redhat.com/errata/RHSA-2026:73959
- https://access.redhat.com/errata/RHSA-2026:73960
- https://access.redhat.com/errata/RHSA-2026:73961
- https://access.redhat.com/errata/RHSA-2026:73962
- https://access.redhat.com/errata/RHSA-2026:74458
- https://access.redhat.com/errata/RHSA-2026:74459
- https://access.redhat.com/errata/RHSA-2026:74460
- https://access.redhat.com/errata/RHSA-2026:74461