CVE-2026-4775 Details

A signed integer overflow vulnerability has been identified in the libtiff library, specifically within the putcontig8bitYCbCr44tile function. This vulnerability arises when the function processes specially crafted TIFF files that have extremely large widths and specific YCbCr subsampling. The overflow occurs in the calculation of a pointer progression variable, causing memory pointers to incorrectly progress negatively. This flaw can be exploited by remote attackers to perform out-of-bounds writes to the heap, potentially leading to application crashes or arbitrary code execution.

Avoid processing untrusted or maliciously crafted TIFF files with applications that use the libtiff library. If it is necessary to process such files, consider running the applications in a sandboxed environment to limit the potential impact of exploitation.