Threats Tagged 'cve-2026-52492'

CVE-2026-52492 is an integer overflow vulnerability in the libtiff rgb2ycbcr utility's cvtRaster() function. This flaw occurs when computing strip buffer sizes, potentially causing an undersized heap allocation. The resulting heap-based buffer overflow can be triggered during the YCbCr conversion of a specially crafted TIFF image. The vulnerability has a high severity rating with a CVSS score of 7.8.

CVE-2026-52492 is an integer overflow vulnerability in the libtiff library's rgb2ycbcr utility, specifically in the cvtRaster() function. This flaw occurs when computing strip buffer sizes, leading to an undersized heap allocation. The resulting heap-based buffer overflow can be triggered during the YCbCr conversion of a crafted TIFF image. The vulnerability has a high severity rating with a CVSS score of 7.8.

A high severity security vulnerability (CVE-2026-52490) exists in the libtiff library used by Red Hat Hardened Images RPMs. The flaw allows arbitrary code execution via the process_command_opts() function. Red Hat has released an update including libtiff version 4.7.2-2.hum1 to address this issue for multiple architectures including aarch64 and x86_64. No exploits are currently known in the wild.