# CVE-2026-4775: Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing CVE-2026-4775 is fixed in 15 products on 1 platform, first by RHSA-2026:19586, released March 24, 2026. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2026-4775 - Priority: High - CVSS: 7.8 (Important) - EPSS: 0.0057 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Mar 24, 2026 - Weakness: Integer Overflow or Wraparound - Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4775 ## Description A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | compat-libtiff3 RHEL 8 | 0:3.9.4-15.el8_10 | [RHSA-2026:20585](https://patchblox.com/security/data/fix/linux/rhsa-2026-20585.md) | May 27, 2026 | | Linux | compat-libtiff3 almalinux 8 | 3.9.4-15.el8_10 | [ALSA-2026:20585](https://patchblox.com/security/data/fix/linux/alsa-2026-20585.md) | May 26, 2026 | | Linux | compat-libtiff3 ol 8 | 0:3.9.4-15.el8_10 | [ELSA-2026-20585](https://patchblox.com/security/data/fix/linux/elsa-2026-20585.md) | May 26, 2026 | | Linux | compat-libtiff3 rocky 8 | 0:3.9.4-15.el8_10 | [RLSA-2026:20585](https://patchblox.com/security/data/fix/linux/rlsa-2026-20585.md) | May 29, 2026 | | Linux | libtiff RHEL 10 | 4.6.0-6.el10_0.3 | [RHSA-2026:19586](https://patchblox.com/security/data/fix/linux/rhsa-2026-19586.md) | Mar 24, 2026 | | Linux | libtiff RHEL 8 | 0:4.0.9-37.el8_10 | [RHSA-2026:16055](https://patchblox.com/security/data/fix/linux/rhsa-2026-16055.md) | May 15, 2026 | | Linux | libtiff RHEL 9 | 0:4.4.0-18.el9_8 | [RHSA-2026:19363](https://patchblox.com/security/data/fix/linux/rhsa-2026-19363.md) | Apr 30, 2026 | | Linux | libtiff almalinux 10 | 4.6.0-8.el10_2.1 | [ALSA-2026:19150](https://patchblox.com/security/data/fix/linux/alsa-2026-19150.md) | May 19, 2026 | | Linux | libtiff almalinux 8 | 4.0.9-37.el8_10 | [ALSA-2026:16055](https://patchblox.com/security/data/fix/linux/alsa-2026-16055.md) | May 11, 2026 | | Linux | libtiff almalinux 9 | 4.4.0-18.el9_8 | [ALSA-2026:19363](https://patchblox.com/security/data/fix/linux/alsa-2026-19363.md) | May 19, 2026 | | Linux | libtiff amzn 2023 | 4.4.0-4.amzn2023.0.26 | [ALAS2023-2026-1547](https://patchblox.com/security/data/fix/linux/alas2023-2026-1547.md) | Apr 13, 2026 | | Linux | libtiff ol 10 | 0:4.6.0-6.el10_1.3 | [ELSA-2026-12265](https://patchblox.com/security/data/fix/linux/elsa-2026-12265.md) | Apr 30, 2026 | | Linux | libtiff ol 8 | 0:4.0.9-37.el8_10 | [ELSA-2026-16055](https://patchblox.com/security/data/fix/linux/elsa-2026-16055.md) | May 11, 2026 | | Linux | libtiff ol 9 | 0:4.4.0-15.el9_7.3 | [ELSA-2026-12271](https://patchblox.com/security/data/fix/linux/elsa-2026-12271.md) | Apr 30, 2026 | | Linux | libtiff rocky 10 | 0:4.6.0-8.el10_2.1 | [RLSA-2026:19150](https://patchblox.com/security/data/fix/linux/rlsa-2026-19150.md) | May 29, 2026 | | Linux | libtiff rocky 8 | 0:4.0.9-37.el8_10 | [RLSA-2026:16055](https://patchblox.com/security/data/fix/linux/rlsa-2026-16055.md) | May 13, 2026 | | Linux | libtiff rocky 9 | 0:4.4.0-18.el9_8 | [RLSA-2026:19363](https://patchblox.com/security/data/fix/linux/rlsa-2026-19363.md) | May 28, 2026 | | Linux | libtiff-debuginfo amzn 2023 | 4.4.0-4.amzn2023.0.26 | [ALAS2023-2026-1547](https://patchblox.com/security/data/fix/linux/alas2023-2026-1547.md) | Apr 13, 2026 | | Linux | libtiff-debugsource amzn 2023 | 4.4.0-4.amzn2023.0.26 | [ALAS2023-2026-1547](https://patchblox.com/security/data/fix/linux/alas2023-2026-1547.md) | Apr 13, 2026 | | Linux | libtiff-devel RHEL 8 | 0:4.0.9-37.el8_10 | [RHSA-2026:16055](https://patchblox.com/security/data/fix/linux/rhsa-2026-16055.md) | May 15, 2026 | | Linux | libtiff-devel RHEL 9 | 0:4.4.0-18.el9_8 | [RHSA-2026:19363](https://patchblox.com/security/data/fix/linux/rhsa-2026-19363.md) | Apr 30, 2026 | | Linux | libtiff-devel almalinux 10 | 4.6.0-8.el10_2.1 | [ALSA-2026:19150](https://patchblox.com/security/data/fix/linux/alsa-2026-19150.md) | May 19, 2026 | | Linux | libtiff-devel almalinux 8 | 4.0.9-37.el8_10 | [ALSA-2026:16055](https://patchblox.com/security/data/fix/linux/alsa-2026-16055.md) | May 11, 2026 | | Linux | libtiff-devel almalinux 9 | 4.4.0-18.el9_8 | [ALSA-2026:19363](https://patchblox.com/security/data/fix/linux/alsa-2026-19363.md) | May 19, 2026 | | Linux | libtiff-devel amzn 2023 | 4.4.0-4.amzn2023.0.26 | [ALAS2023-2026-1547](https://patchblox.com/security/data/fix/linux/alas2023-2026-1547.md) | Apr 13, 2026 | | Linux | libtiff-devel ol 10 | 0:4.6.0-6.el10_1.3 | [ELSA-2026-12265](https://patchblox.com/security/data/fix/linux/elsa-2026-12265.md) | Apr 30, 2026 | | Linux | libtiff-devel ol 8 | 0:4.0.9-37.el8_10 | [ELSA-2026-16055](https://patchblox.com/security/data/fix/linux/elsa-2026-16055.md) | May 11, 2026 | | Linux | libtiff-devel ol 9 | 0:4.4.0-15.el9_7.3 | [ELSA-2026-12271](https://patchblox.com/security/data/fix/linux/elsa-2026-12271.md) | Apr 30, 2026 | | Linux | libtiff-static amzn 2023 | 4.4.0-4.amzn2023.0.26 | [ALAS2023-2026-1547](https://patchblox.com/security/data/fix/linux/alas2023-2026-1547.md) | Apr 13, 2026 | | Linux | libtiff-tools RHEL 8 | 0:4.0.9-37.el8_10 | [RHSA-2026:16055](https://patchblox.com/security/data/fix/linux/rhsa-2026-16055.md) | May 15, 2026 | | Linux | libtiff-tools RHEL 9 | 0:4.4.0-18.el9_8 | [RHSA-2026:19363](https://patchblox.com/security/data/fix/linux/rhsa-2026-19363.md) | Apr 30, 2026 | | Linux | libtiff-tools almalinux 10 | 4.6.0-8.el10_2.1 | [ALSA-2026:19150](https://patchblox.com/security/data/fix/linux/alsa-2026-19150.md) | May 19, 2026 | | Linux | libtiff-tools almalinux 8 | 4.0.9-37.el8_10 | [ALSA-2026:16055](https://patchblox.com/security/data/fix/linux/alsa-2026-16055.md) | May 11, 2026 | | Linux | libtiff-tools almalinux 9 | 4.4.0-18.el9_8 | [ALSA-2026:19363](https://patchblox.com/security/data/fix/linux/alsa-2026-19363.md) | May 19, 2026 | | Linux | libtiff-tools amzn 2023 | 4.4.0-4.amzn2023.0.26 | [ALAS2023-2026-1547](https://patchblox.com/security/data/fix/linux/alas2023-2026-1547.md) | Apr 13, 2026 | | Linux | libtiff-tools ol 10 | 0:4.6.0-6.el10_1.3 | [ELSA-2026-12265](https://patchblox.com/security/data/fix/linux/elsa-2026-12265.md) | Apr 30, 2026 | | Linux | libtiff-tools ol 8 | 0:4.0.9-37.el8_10 | [ELSA-2026-16055](https://patchblox.com/security/data/fix/linux/elsa-2026-16055.md) | May 11, 2026 | | Linux | libtiff-tools ol 9 | 0:4.4.0-15.el9_7.3 | [ELSA-2026-12271](https://patchblox.com/security/data/fix/linux/elsa-2026-12271.md) | Apr 30, 2026 | | Linux | libtiff-tools-debuginfo amzn 2023 | 4.4.0-4.amzn2023.0.26 | [ALAS2023-2026-1547](https://patchblox.com/security/data/fix/linux/alas2023-2026-1547.md) | Apr 13, 2026 | | Linux | mingw-libtiff rocky 8 | 0:4.0.9-4.el8_10 | [RLSA-2026:14929](https://patchblox.com/security/data/fix/linux/rlsa-2026-14929.md) | May 11, 2026 | | Linux | mingw32-libtiff RHEL 8 | 0:4.0.9-4.el8_10 | [RHSA-2026:14929](https://patchblox.com/security/data/fix/linux/rhsa-2026-14929.md) | May 15, 2026 | | Linux | mingw32-libtiff almalinux 8 | 4.0.9-4.el8_10 | [ALSA-2026:14929](https://patchblox.com/security/data/fix/linux/alsa-2026-14929.md) | May 7, 2026 | | Linux | mingw32-libtiff ol 8 | 0:4.0.9-4.el8_10 | [ELSA-2026-14929](https://patchblox.com/security/data/fix/linux/elsa-2026-14929.md) | May 8, 2026 | | Linux | mingw32-libtiff-static RHEL 8 | 0:4.0.9-4.el8_10 | [RHSA-2026:14929](https://patchblox.com/security/data/fix/linux/rhsa-2026-14929.md) | May 15, 2026 | | Linux | mingw32-libtiff-static almalinux 8 | 4.0.9-4.el8_10 | [ALSA-2026:14929](https://patchblox.com/security/data/fix/linux/alsa-2026-14929.md) | May 7, 2026 | | Linux | mingw32-libtiff-static ol 8 | 0:4.0.9-4.el8_10 | [ELSA-2026-14929](https://patchblox.com/security/data/fix/linux/elsa-2026-14929.md) | May 8, 2026 | | Linux | mingw64-libtiff RHEL 8 | 0:4.0.9-4.el8_10 | [RHSA-2026:14929](https://patchblox.com/security/data/fix/linux/rhsa-2026-14929.md) | May 15, 2026 | | Linux | mingw64-libtiff almalinux 8 | 4.0.9-4.el8_10 | [ALSA-2026:14929](https://patchblox.com/security/data/fix/linux/alsa-2026-14929.md) | May 7, 2026 | | Linux | mingw64-libtiff ol 8 | 0:4.0.9-4.el8_10 | [ELSA-2026-14929](https://patchblox.com/security/data/fix/linux/elsa-2026-14929.md) | May 8, 2026 | | Linux | mingw64-libtiff-static RHEL 8 | 0:4.0.9-4.el8_10 | [RHSA-2026:14929](https://patchblox.com/security/data/fix/linux/rhsa-2026-14929.md) | May 15, 2026 | | Linux | mingw64-libtiff-static almalinux 8 | 4.0.9-4.el8_10 | [ALSA-2026:14929](https://patchblox.com/security/data/fix/linux/alsa-2026-14929.md) | May 7, 2026 | | Linux | mingw64-libtiff-static ol 8 | 0:4.0.9-4.el8_10 | [ELSA-2026-14929](https://patchblox.com/security/data/fix/linux/elsa-2026-14929.md) | May 8, 2026 | | Linux | tiff Debian 12.15 (bookworm) | 4.5.0-6+deb12u4 | [DEBIAN-CVE-2026-4775](https://patchblox.com/security/data/fix/linux/debian-cve-2026-4775.md) | Mar 24, 2026 | | Linux | tiff Debian 13.5 (trixie) | 4.7.0-3+deb13u2 | [DEBIAN-CVE-2026-4775](https://patchblox.com/security/data/fix/linux/debian-cve-2026-4775.md) | Mar 24, 2026 | | Linux | tiff Debian 14 | 4.7.1-2 | [DEBIAN-CVE-2026-4775](https://patchblox.com/security/data/fix/linux/debian-cve-2026-4775.md) | Mar 24, 2026 | | Linux | tiff opensuse-leap 16.0 | 4.7.2-160000.1.1 | [OPENSUSE-SU-2026:21289-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21289-1.md) | Jul 10, 2026 | | Linux | tiff sles 15.6 | 4.7.2-150600.3.29.1 | [SUSE-SU-2026:2853-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2853-1.md) | Jul 10, 2026 | | Linux | tiff sles 15.7 | 4.7.2-150600.3.29.1 | [SUSE-SU-2026:2853-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2853-1.md) | Jul 10, 2026 | | Linux | tiff sles 16.0 | 4.7.2-160000.1.1 | [SUSE-SU-2026:22616-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22616-1.md) | Jul 10, 2026 | | Linux | tiff-man opensuse-leap 16.0 | 4.7.2-160000.1.1 | [OPENSUSE-SU-2026:21289-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21289-1.md) | Jul 10, 2026 | --- Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.