cbcvebase.
CVE-2026-4775
published 2026-03-24

CVE-2026-4775: A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by…

PriorityP343high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.55%
42.0th percentile
A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

Affected

9 ranges
VendorProductVersion rangeFixed in
debiandebian_linux——
debiantiff< tiff 4.5.0-6+deb12u4 (bookworm)tiff 4.5.0-6+deb12u4 (bookworm)
msrcazl3_libtiff_4.6.0-12_on_azure_linux_3.0——
msrccbl2_libtiff_4.6.0-12_on_cbl_mariner_2.0——
redhatenterprise_linux——
redhatenterprise_linux——
redhatenterprise_linux——
redhatenterprise_linux——
redhatenterprise_linux——

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_msrc7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.