CVE Feed

    Dashboard / CVE / CVE-2026-12912

    CVE-2026-12912

    A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).

    Published:Jun 29, 2026
    Last Modified:Aug 31, 2026
    EPS:Jun 29, 2026
    EPSS Score:0.00433
    CVSS Score:7.3

    Affected Products

    Vendor
    Libtiff
    Product
    Libtiff
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Eus
    Vendor
    Redhat
    Product
    Hardened Images
    Vendor
    Redhat
    Product
    Hummingbird
    Vendor
    Redhat
    Product
    Rhel Aus
    Vendor
    Redhat
    Product
    Rhel E4s
    Vendor
    Redhat
    Product
    Rhel Els
    Vendor
    Redhat
    Product
    Rhel Eus
    Vendor
    Redhat
    Product
    Rhel Eus Long Life
    Vendor
    Redhat
    Product
    Rhel Tus

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-122 Heap-based Buffer Overflow

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-92 Forced Integer Overflow

    Related CVEs

    CVE-2026-52491 (CVSS 8.4) — An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via …
    CVE-2026-52490 (CVSS 9.8) — An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via …
    CVE-2026-52492 (CVSS 7.8) — An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes …
    CVE-2026-4775 (CVSS 7.8) — A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerabili…
    CVE-2025-61143 (CVSS 5.5) — libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c…
    CVE-2025-61144 (CVSS 7.3) — libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.…
    CVE-2025-61145 (CVSS 5) — libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.…
    CVE-2025-9165 (CVSS 1.1) — A flaw has been found in LibTIFF 4.7.0. This affects the function _TIFFmallocExt/_TIFFCheckRealloc/TIFFHashSet…
    CVE-2025-8961 (CVSS 1.9) — A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the …
    CVE-2025-8851 (CVSS 4.8) — A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStri…

    References

    https://access.redhat.com/errata/RHSA-2026:34890
    https://access.redhat.com/errata/RHSA-2026:41892
    https://access.redhat.com/errata/RHSA-2026:42668
    https://access.redhat.com/errata/RHSA-2026:47183
    https://access.redhat.com/errata/RHSA-2026:47184
    https://access.redhat.com/errata/RHSA-2026:49671
    https://access.redhat.com/errata/RHSA-2026:50774
    https://access.redhat.com/errata/RHSA-2026:54638
    https://access.redhat.com/errata/RHSA-2026:54640
    https://access.redhat.com/errata/RHSA-2026:54642
    https://access.redhat.com/errata/RHSA-2026:58545
    https://access.redhat.com/errata/RHSA-2026:58553
    https://access.redhat.com/errata/RHSA-2026:58554
    https://access.redhat.com/errata/RHSA-2026:58556
    https://access.redhat.com/errata/RHSA-2026:61657
    https://access.redhat.com/security/cve/CVE-2026-12912
    https://bugzilla.redhat.com/show_bug.cgi?id=2492871
    https://gitlab.com/libtiff/libtiff/-/merge_requests/873
    https://gitlab.com/libtiff/libtiff/-/work_items/824
    https://access.redhat.com/errata/RHSA-2026:34890
    https://access.redhat.com/errata/RHSA-2026:41892
    https://access.redhat.com/errata/RHSA-2026:42668
    https://access.redhat.com/errata/RHSA-2026:47183
    https://access.redhat.com/errata/RHSA-2026:47184
    https://access.redhat.com/errata/RHSA-2026:49671
    https://access.redhat.com/errata/RHSA-2026:50774
    https://access.redhat.com/errata/RHSA-2026:54638
    https://access.redhat.com/errata/RHSA-2026:54640
    https://access.redhat.com/errata/RHSA-2026:54642
    https://access.redhat.com/errata/RHSA-2026:58545
    https://access.redhat.com/errata/RHSA-2026:58553
    https://access.redhat.com/errata/RHSA-2026:58554
    https://access.redhat.com/errata/RHSA-2026:58556
    https://access.redhat.com/errata/RHSA-2026:61657
    https://access.redhat.com/security/cve/CVE-2026-12912
    https://bugzilla.redhat.com/show_bug.cgi?id=2492871
    https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12912.json

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High