Skip to content

CVE-2026-4775 on Cyberus Linux 26.05

Aliases: CVE-2026-4775

Packages: libtiff

Status: Resolved

Advisory Information

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

Updates

2026-09-03 23:08 CEST

Metadata changes:

  • Status for package libtiff: “Resolved” (eb637b2e1362a2f3f8da0faf729d9d9528bda12f)

2026-07-28 00:07 CEST

Metadata changes:

  • Status for package libtiff: “In Progress” (eb637b2e1362a2f3f8da0faf729d9d9528bda12f)

(Amended on: 2026-07-28 00:08 CEST)

2026-07-20 19:02 CEST

Metadata changes:

  • Status for package libtiff: “Acknowledged”

(Amended on: 2026-07-20 19:10 CEST)

2026-07-20 19:02 CEST

Metadata changes:

  • Status for package libtiff: “New”