Red Hat Product Security released an advisory (RHSA-2026:34890) for a security update to Red Hat Hardened Images RPMs, specifically updating libtiff packages to version 4.7.1-2.4.hum1. This update addresses CVE-2026-12912, a vulnerability classified as CWE-122 (Heap-based Buffer Overflow). The advisory does not provide CVSS metrics or detailed exploitation information but categorizes the severity as high. The update is available for multiple architectures including aarch64 and x86_64. No known exploits have been reported in the wild. The vendor advisory does not explicitly state affected product versions or fixed version ranges.

The vulnerability CVE-2026-12912 in libtiff could allow an attacker to cause a heap-based buffer overflow, potentially leading to denial of service or arbitrary code execution if exploited. The advisory classifies the severity as high but does not provide further impact details or evidence of exploitation in the wild.

A security update is available from Red Hat for libtiff packages included in Red Hat Hardened Images RPMs. Users should apply the updated packages (libtiff-4.7.1-2.4.hum1 and related) as provided by Red Hat to remediate this vulnerability. The vendor advisory does not indicate any temporary workarounds or that no action is required. Patch status is confirmed by the advisory. Refer to Red Hat's official update channels for applying the update.