A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
26 Oct 2026, 19:13
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Redhat enterprise Linux Els
Redhat openshift Ai Redhat enterprise Linux Eus Redhat codeready Linux Builder Eus Redhat codeready Linux Builder Redhat enterprise Linux Update Services For Sap Solutions Redhat enterprise Linux Server Tus Redhat enterprise Linux Server Aus Redhat ai Inference Server |
|
| References | () https://access.redhat.com/errata/RHSA-2026:12265 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:12271 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:14929 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:16055 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:19150 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:19363 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:19585 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:19586 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:19604 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:19608 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:19609 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:19657 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:19659 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:19702 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:20583 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:20585 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:20591 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:20592 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:24992 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:25096 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:25910 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:30078 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:30087 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:30088 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:30089 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:30349 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:33388 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:74674 - Vendor Advisory | |
| References | () https://access.redhat.com/security/cve/CVE-2026-4775 - Vendor Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2450768 - Issue Tracking, Vendor Advisory | |
| References | () https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4775.json - Vendor Advisory | |
| CPE | cpe:2.3:a:libtiff:libtiff:-:*:*:*:*:*:*:* |
cpe:2.3:a:redhat:codeready_linux_builder_eus:10.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder_eus:9.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:* cpe:2.3:a:redhat:ai_inference_server:*:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_ai:*:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_els:7.0:*:*:*:*:*:*:* cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder:10.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:10.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder_eus:9.6:*:*:*:*:*:*:* |
02 Oct 2026, 02:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Information
Published : 2026-03-24 15:16
Updated : 2026-10-26 19:13
NVD link : CVE-2026-4775
Mitre link : CVE-2026-4775
CVE.ORG link : CVE-2026-4775
JSON object : View
Products Affected
redhat
- openshift_ai
- enterprise_linux_eus
- ai_inference_server
- hardened_images
- enterprise_linux_server_tus
- enterprise_linux_server_aus
- codeready_linux_builder
- enterprise_linux
- enterprise_linux_els
- enterprise_linux_update_services_for_sap_solutions
- codeready_linux_builder_eus
debian
- debian_linux
libtiff
- libtiff
CWE
CWE-190
Integer Overflow or Wraparound
