CVE-2026-4775

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.
References
Link Resource
https://access.redhat.com/errata/RHSA-2026:12265 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:12271 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:14929 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:16055 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:19150 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:19363 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:19585 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:19586 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:19604 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:19608 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:19609 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:19657 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:19659 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:19702 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:20583 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:20585 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:20591 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:20592 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:24992 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:25096 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:25910 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:30078 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:30087 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:30088 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:30089 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:30349 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33388 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:74674 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-4775 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450768 Issue Tracking Vendor Advisory
https://lists.debian.org/debian-lts-announce/2026/04/msg00016.html Mailing List Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:12265 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:12271 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:14929 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:16055 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:19150 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:19363 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:19585 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:19586 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:19604 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:19608 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:19609 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:19657 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:19659 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:19702 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:20583 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:20585 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:20591 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:20592 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:24992 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:25096 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:25910 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:30078 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:30087 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:30088 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:30089 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:30349 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-4775 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450768 Issue Tracking Vendor Advisory
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4775.json Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:a:redhat:ai_inference_server:*:*:*:*:*:*:*:*
cpe:2.3:a:redhat:ai_inference_server:*:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder:10.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder_eus:9.4:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder_eus:9.6:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder_eus:10.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:hardened_images:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_ai:*:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_els:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:10.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:*

History

26 Oct 2026, 19:13

Type Values Removed Values Added
First Time Redhat enterprise Linux Els
Redhat openshift Ai
Redhat enterprise Linux Eus
Redhat codeready Linux Builder Eus
Redhat codeready Linux Builder
Redhat enterprise Linux Update Services For Sap Solutions
Redhat enterprise Linux Server Tus
Redhat enterprise Linux Server Aus
Redhat ai Inference Server
References () https://access.redhat.com/errata/RHSA-2026:12265 - () https://access.redhat.com/errata/RHSA-2026:12265 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:12271 - () https://access.redhat.com/errata/RHSA-2026:12271 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:14929 - () https://access.redhat.com/errata/RHSA-2026:14929 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:16055 - () https://access.redhat.com/errata/RHSA-2026:16055 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:19150 - () https://access.redhat.com/errata/RHSA-2026:19150 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:19363 - () https://access.redhat.com/errata/RHSA-2026:19363 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:19585 - () https://access.redhat.com/errata/RHSA-2026:19585 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:19586 - () https://access.redhat.com/errata/RHSA-2026:19586 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:19604 - () https://access.redhat.com/errata/RHSA-2026:19604 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:19608 - () https://access.redhat.com/errata/RHSA-2026:19608 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:19609 - () https://access.redhat.com/errata/RHSA-2026:19609 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:19657 - () https://access.redhat.com/errata/RHSA-2026:19657 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:19659 - () https://access.redhat.com/errata/RHSA-2026:19659 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:19702 - () https://access.redhat.com/errata/RHSA-2026:19702 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:20583 - () https://access.redhat.com/errata/RHSA-2026:20583 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:20585 - () https://access.redhat.com/errata/RHSA-2026:20585 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:20591 - () https://access.redhat.com/errata/RHSA-2026:20591 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:20592 - () https://access.redhat.com/errata/RHSA-2026:20592 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:24992 - () https://access.redhat.com/errata/RHSA-2026:24992 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:25096 - () https://access.redhat.com/errata/RHSA-2026:25096 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:25910 - () https://access.redhat.com/errata/RHSA-2026:25910 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:30078 - () https://access.redhat.com/errata/RHSA-2026:30078 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:30087 - () https://access.redhat.com/errata/RHSA-2026:30087 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:30088 - () https://access.redhat.com/errata/RHSA-2026:30088 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:30089 - () https://access.redhat.com/errata/RHSA-2026:30089 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:30349 - () https://access.redhat.com/errata/RHSA-2026:30349 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:33388 - () https://access.redhat.com/errata/RHSA-2026:33388 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:74674 - () https://access.redhat.com/errata/RHSA-2026:74674 - Vendor Advisory
References () https://access.redhat.com/security/cve/CVE-2026-4775 - Third Party Advisory () https://access.redhat.com/security/cve/CVE-2026-4775 - Vendor Advisory
References () https://bugzilla.redhat.com/show_bug.cgi?id=2450768 - Issue Tracking, Third Party Advisory () https://bugzilla.redhat.com/show_bug.cgi?id=2450768 - Issue Tracking, Vendor Advisory
References () https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4775.json - () https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4775.json - Vendor Advisory
CPE cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:a:libtiff:libtiff:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder_eus:10.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder_eus:9.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:*
cpe:2.3:a:redhat:ai_inference_server:*:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_ai:*:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_els:7.0:*:*:*:*:*:*:*
cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder:10.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:10.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder_eus:9.6:*:*:*:*:*:*:*

02 Oct 2026, 02:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:74674 -

Information

Published : 2026-03-24 15:16

Updated : 2026-10-26 19:13


NVD link : CVE-2026-4775

Mitre link : CVE-2026-4775

CVE.ORG link : CVE-2026-4775


JSON object : View

Products Affected

redhat

  • openshift_ai
  • enterprise_linux_eus
  • ai_inference_server
  • hardened_images
  • enterprise_linux_server_tus
  • enterprise_linux_server_aus
  • codeready_linux_builder
  • enterprise_linux
  • enterprise_linux_els
  • enterprise_linux_update_services_for_sap_solutions
  • codeready_linux_builder_eus

debian

  • debian_linux

libtiff

  • libtiff
CWE
CWE-190

Integer Overflow or Wraparound