Homepage

Integer Overflow or Wraparound The advisory has been revoked - it doesn't affect any version of package libtiff-devel  (opens in a new tab)

Threat Intelligence

Social Trends
Trending on 𝕏
EPSS
0.55% (42nd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL7-LIBTIFFDEVEL-15798306
  • published28 Mar 2026
  • disclosed24 Mar 2026
Report a new vulnerability Found a mistake?

Introduced: 24 Mar 2026

CVE-2026-4775  (opens in a new tab)
CWE-190  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:7.

NVD Description

Note: Versions mentioned in the description apply only to the upstream libtiff-devel package and not the libtiff-devel package as distributed by RHEL.

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

References