Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-08-25T00:00:00 libtiff: libtiff: Arbitrary code execution via thumbnail.c: main() component 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H CWE-120

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main() component

A flaw was found in libtiff. An attacker could exploit this vulnerability by processing a specially crafted file, leading to arbitrary code execution. This issue occurs within the `thumbnail.c: main()` component. Successful exploitation could allow the attacker to take control of the affected system.

Red Hat Hardened Images 2026-08-11T00:00:00Z RHSA-2026:53467 libtiff-main-4.7.2-2.hum1 Red Hat Enterprise Linux 10 Not affected libtiff Red Hat Enterprise Linux 6 Out of support scope libtiff Red Hat Enterprise Linux 7 Not affected compat-libtiff3 Red Hat Enterprise Linux 7 Affected libtiff Red Hat Enterprise Linux 8 Not affected compat-libtiff3 Red Hat Enterprise Linux 8 Not affected libtiff Red Hat Enterprise Linux 8 Affected mingw-libtiff Red Hat Enterprise Linux 9 Not affected libtiff https://www.cve.org/CVERecord?id=CVE-2026-52491 https://nvd.nist.gov/vuln/detail/CVE-2026-52491 https://gist.github.com/okyfh/5cc53fa67d229017231cf18c91768bd9 https://gitlab.com/libtiff/libtiff/-/commit/9ce4d089bcf25496663776d9e6336738112f09a3