Skip to content

CVE-2026-36849 on CTRL-OS 26.05

Aliases: CVE-2026-36849

Packages: libtiff

Status: In Progress

Advisory Information

An issue in libtiff v4.7.1 allows an attacker to cause a denial of service via a crafted TIFF file containing a large SamplesPerPixel tag value.

== Affected Versions ==

libtiff v4.7.1 and prior

== Patch ==

https://gitlab.com/gitlab-org/build/omnibus-mirror/libtiff/-/commit/eedba405d3695b52faae65994c5904f228eca0bf

== References ==

  • CVE: CVE-2026-36849
  • Issue: https://gitlab.com/libtiff/libtiff/-/work_items/781

Updates

2026-07-28 00:08 CEST

Metadata changes:

  • Status for package libtiff: “In Progress” (eb637b2e1362a2f3f8da0faf729d9d9528bda12f)

2026-07-20 19:03 CEST

Metadata changes:

  • Status for package libtiff: “Acknowledged”

(Amended on: 2026-07-20 19:10 CEST)

2026-07-07 19:29 CEST

(Amended on: 2026-07-07 23:53 CEST)

2026-06-17 22:02 CEST

Metadata changes:

  • Status for package libtiff: “New”