Red Hat issued a security advisory (RHSA-2026:34890) for Red Hat Hardened Images RPMs to address CVE-2026-12912, a vulnerability in libtiff packages. The CVE is associated with CWE-122 (likely a buffer overflow or similar memory issue). The advisory lists updated RPMs for libtiff version 4.7.1-2.4.hum1 for aarch64 and x86_64 architectures. The CVSS vector indicates local attack vector with low attack complexity, requiring low privileges and user interaction, impacting confidentiality, integrity, and availability with high severity. The advisory does not explicitly state a fixed version but provides updated RPMs as the solution. No known exploits have been reported in the wild.

The vulnerability (CVE-2026-12912) impacts confidentiality, integrity, and availability of affected systems running vulnerable libtiff packages. The CVSS vector indicates a local attacker with low complexity and low privileges could exploit this vulnerability with user interaction. The high severity rating reflects the potential for significant impact if exploited. No known exploits in the wild have been reported, reducing immediate risk but the vulnerability remains critical to address.

Red Hat has released updated libtiff RPMs (version 4.7.1-2.4.hum1) for Red Hat Hardened Images to address this vulnerability. Users should apply these updates as provided by Red Hat to remediate the issue. No additional mitigation steps are indicated or required beyond applying the official update. Patch status is confirmed by the vendor advisory.