The libtiff library contained a use-after-free vulnerability (CVE-2025-8176) that could potentially lead to security issues when processing TIFF files. Red Hat Product Security published an advisory (RHSA-2025:20034) describing this vulnerability and released updated libtiff packages for Red Hat Enterprise Linux 8 and CodeReady Linux Builder variants on x86_64, IBM z Systems, Power little endian, and ARM 64 architectures. The advisory rates the issue as important and provides links to updated packages and instructions for applying the update. No CVSS score is currently available for this vulnerability.

The use-after-free vulnerability in libtiff could allow an attacker to cause memory corruption, which may lead to application crashes or potentially arbitrary code execution depending on the context of use. The advisory rates the security impact as important (high severity), indicating a significant risk if exploited. No known exploits in the wild have been reported at this time.

Red Hat has released updated libtiff packages that fix the use-after-free vulnerability. Users of affected Red Hat Enterprise Linux 8 and CodeReady Linux Builder variants should apply the security update as detailed in the Red Hat advisory RHSA-2025:20034 and the referenced article https://access.redhat.com/articles/11258. Applying these official patches is the recommended and effective mitigation. There is no indication that additional mitigation steps are required beyond applying the update.