https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T08:30:40.668507+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-18495 BELL-CVE-2026-18495 2026-10-12T08:30:40.674907+00:00

Affected: Alpaquita:25: tiff, Alpaquita:stream: tiff, BellSoft Hardened Containers:25: tiff, BellSoft Hardened Containers:stream: tiff

 https://cve.radiocsirt.org/vuln/euvd-2026-366940 EUVD-2026-366940 2026-10-12T08:30:40.674961+00:00 EUVD-2026-366940 https://cve.radiocsirt.org/vuln/fkie_cve-2026-18495 fkie_cve-2026-18495 2026-10-12T08:30:40.674976+00:00

A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit `StripByteCounts` value to be truncated to a 32-bit integer. This leads to an undersized memory allocation and a subsequent out-of-bounds memory copy, resulting in a crash and severe memory corruption.

 https://cve.radiocsirt.org/vuln/ghsa-6x88-8xw5-p2gw GHSA-6x88-8xw5-p2gw 2026-10-12T08:30:40.675002+00:00

A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit `StripByteCounts` value to be truncated to a 32-bit integer. This leads to an undersized memory allocation and a subsequent out-of-bounds memory copy, resulting in a crash and severe memory corruption.

 https://cve.radiocsirt.org/vuln/oesa-2026-4063 OESA-2026-4063 — libtiff security update 2026-10-12T08:30:40.675019+00:00

Affected: openEuler:20.03-LTS-SP4: libtiff, openEuler:22.03-LTS-SP4: libtiff, openEuler:24.03-LTS-SP1: libtiff, openEuler:24.03-LTS-SP3: libtiff, openEuler:24.03-LTS-SP4: libtiff

This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library. Security Fix(es):

A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit `StripByteCounts` value to be truncated to a 32-bit integer. This leads to an undersized memory allocation and a subsequent out-of-bounds memory copy, resulting in a crash and severe memory corruption.(CVE-2026-18495)

 https://cve.radiocsirt.org/vuln/rhsa-2026:53467 RHSA-2026:53467 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-12T08:30:40.675050+00:00

libtiff: libtiff: heap-buffer overflow via numeric truncation in the JPEG raw passthrough libtiff: libtiff: Arbitrary code execution via process_command_opts() function libtiff: libtiff: Arbitrary code execution via thumbnail.c: main() component libtiff: libtiff: Arbitrary code execution via crafted TIFF image

 https://cve.radiocsirt.org/vuln/suse-su-2026:4252-1 SUSE-SU-2026:4252-1 — Security update for tiff 2026-10-12T08:30:40.675072+00:00

Security update for tiff

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-18495 UBUNTU-CVE-2026-18495 2026-10-12T08:30:40.675086+00:00

Affected: Ubuntu:Pro:14.04:LTS: gdal, Ubuntu:Pro:14.04:LTS: tiff, Ubuntu:Pro:16.04:LTS: tiff, Ubuntu:Pro:16.04:LTS: gdal, Ubuntu:Pro:18.04:LTS: tiff, Ubuntu:18.04:LTS: neuron, Ubuntu:Pro:18.04:LTS: qtwebengine-opensource-src, Ubuntu:Pro:18.04:LTS: texmaker, Ubuntu:Pro:20.04:LTS: tiff, Ubuntu:20.04:LTS: neuron and 11 more

A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit `StripByteCounts` value to be truncated to a 32-bit integer. This leads to an undersized memory allocation and a subsequent out-of-bounds memory copy, resulting in a crash and severe memory corruption.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3338 WID-SEC-W-2026-3338 — libTIFF: Schwachstelle ermöglicht Denial of Service 2026-10-12T08:30:40.675130+00:00

Ein lokaler Angreifer kann eine Schwachstelle in libTIFF ausnutzen, um einen Denial-of-Service-Zustand oder eine Speicherbeschädigung zu verursachen.