CVE-2026-52492

{"id": "CVE-2026-52492", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-52492", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-27T19:04:50.602512Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-08-24T21:17:19.927", "references": [{"url": "https://gist.github.com/okyfh/fbc5a37cade358361d80f6a498560cfa", "source": "cve@mitre.org"}, {"url": "https://gitlab.com/libtiff/libtiff/-/commit/94affc5cf54111312f9891eb77accb93eebc28d7", "source": "cve@mitre.org"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-190"}]}], "descriptions": [{"lang": "en", "value": "An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image"}, {"lang": "es", "value": "Un desbordamiento de entero en la funci\u00f3n cvtRaster() de la utilidad rgb2ycbcr de libtiff al calcular los tama\u00f1os de los b\u00faferes de tira puede resultar en una asignaci\u00f3n de mont\u00edculo de tama\u00f1o insuficiente y un desbordamiento de b\u00fafer basado en mont\u00edculo posterior durante la conversi\u00f3n YCbCr de una imagen TIFF manipulada."}], "lastModified": "2026-10-12T21:10:00.227", "sourceIdentifier": "cve@mitre.org"}