CVE catalog

CVE-2026-12912

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images w

[CVE catalog]

Severity
High · CVSS 7.3CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.43% · Oct 25, 2026

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiantiffsid4.7.2-1fixed
Debiantiffforky4.7.2-1fixed
Debiantifftrixie4.7.0-3+deb13u3fixed
Debiantifftrixie-security4.7.0-3+deb13u3fixed
Debiantiffbookworm4.5.0-6+deb12u4vulnerable
Debiantiffbookworm-security4.5.0-6+deb12u4vulnerable
CpetiffNot reportedNot reportedvulnerable
Susetifflinux micro 6.14.7.2-slfo.1.1_1.1fixed
Susetifflinux micro 6.04.7.2-1.1fixed
Susetifflinux enterprise server 16.04.7.2-160000.1.1fixed
Susetifflinux enterprise server for sap applications 16.04.7.2-160000.1.1fixed
Susetifflinux micro 6.24.7.2-160000.1.1fixed
Susetifflinux enterprise micro 5.34.0.9-150000.45.69.1fixed
Susetifflinux enterprise micro 5.44.0.9-150000.45.69.1fixed
Susetifflinux enterprise micro 5.54.0.9-150000.45.69.1fixed
Susetifflinux enterprise module for basesystem 15 sp74.0.9-150000.45.69.1fixed
Susetifflinux enterprise high performance computing 15 sp4-espos4.0.9-150000.45.69.1fixed
Susetifflinux enterprise high performance computing 15 sp4-ltss4.0.9-150000.45.69.1fixed
Susetifflinux enterprise high performance computing 15 sp5-espos4.0.9-150000.45.69.1fixed
Susetifflinux enterprise high performance computing 15 sp5-ltss4.0.9-150000.45.69.1fixed
Susetifflinux enterprise server 15 sp4-ltss4.0.9-150000.45.69.1fixed
Susetifflinux enterprise server 15 sp5-ltss4.0.9-150000.45.69.1fixed
Susetifflinux enterprise server 15 sp6-ltss4.0.9-150000.45.69.1fixed
Susetifflinux enterprise server for sap applications 15 sp44.0.9-150000.45.69.1fixed
Susetifflinux enterprise server for sap applications 15 sp54.0.9-150000.45.69.1fixed
Susetifflinux enterprise server for sap applications 15 sp64.0.9-150000.45.69.1fixed
Susetifflinux enterprise server 12 sp5-ltss4.0.9-44.115.1fixed
Susetifflinux enterprise server ltss extended security 12 sp54.0.9-44.115.1fixed
Opensusetiffleap 16.04.7.2-160000.1.1fixed
Opensusetiff-manleap 16.04.7.2-160000.1.1fixed
Susetifflinux enterprise module for basesystem 15 sp74.7.2-150600.3.29.1fixed
Susetifflinux enterprise module for package hub 15 sp74.7.2-150600.3.29.1fixed
Susetifflinux enterprise server 15 sp6-ltss4.7.2-150600.3.29.1fixed
Susetifflinux enterprise server for sap applications 15 sp64.7.2-150600.3.29.1fixed
Opensusetifftumbleweed4.7.2-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiantiffsourcesid4.7.2-1not yet assignedNot reported[1141320]
Debiantiffsourceforky4.7.2-1not yet assignedNot reported[1141320]
Debiantiffsourcetrixie4.7.0-3+deb13u3not yet assignedNot reported[1141320]
Debiantiffsourcebookworm(unfixed)not yet assignedNot reported[1141320]
Susetiffrpmlinux micro 6.14.7.2-slfo.1.1_1.1Not reportedSUSE-SU-2026:22886-1Not reported
Susetiffrpmlinux micro 6.04.7.2-1.1Not reportedSUSE-SU-2026:22796-1Not reported
Susetiffrpmlinux enterprise server 16.04.7.2-160000.1.1Not reportedSUSE-SU-2026:22616-1Not reported
Susetiffrpmlinux enterprise server for sap applications 16.04.7.2-160000.1.1Not reportedSUSE-SU-2026:22616-1Not reported
Susetiffrpmlinux micro 6.24.7.2-160000.1.1Not reportedSUSE-SU-2026:22590-1Not reported
Susetiffrpmlinux enterprise micro 5.34.0.9-150000.45.69.1Not reportedSUSE-SU-2026:3054-1Not reported
Susetiffrpmlinux enterprise micro 5.44.0.9-150000.45.69.1Not reportedSUSE-SU-2026:3054-1Not reported
Susetiffrpmlinux enterprise micro 5.54.0.9-150000.45.69.1Not reportedSUSE-SU-2026:3054-1Not reported
Susetiffrpmlinux enterprise module for basesystem 15 sp74.0.9-150000.45.69.1Not reportedSUSE-SU-2026:3054-1Not reported
Susetiffrpmlinux enterprise high performance computing 15 sp4-espos4.0.9-150000.45.69.1Not reportedSUSE-SU-2026:3054-1Not reported
Susetiffrpmlinux enterprise high performance computing 15 sp4-ltss4.0.9-150000.45.69.1Not reportedSUSE-SU-2026:3054-1Not reported
Susetiffrpmlinux enterprise high performance computing 15 sp5-espos4.0.9-150000.45.69.1Not reportedSUSE-SU-2026:3054-1Not reported
Susetiffrpmlinux enterprise high performance computing 15 sp5-ltss4.0.9-150000.45.69.1Not reportedSUSE-SU-2026:3054-1Not reported
Susetiffrpmlinux enterprise server 15 sp4-ltss4.0.9-150000.45.69.1Not reportedSUSE-SU-2026:3054-1Not reported
Susetiffrpmlinux enterprise server 15 sp5-ltss4.0.9-150000.45.69.1Not reportedSUSE-SU-2026:3054-1Not reported
Susetiffrpmlinux enterprise server 15 sp6-ltss4.0.9-150000.45.69.1Not reportedSUSE-SU-2026:3054-1Not reported
Susetiffrpmlinux enterprise server for sap applications 15 sp44.0.9-150000.45.69.1Not reportedSUSE-SU-2026:3054-1Not reported
Susetiffrpmlinux enterprise server for sap applications 15 sp54.0.9-150000.45.69.1Not reportedSUSE-SU-2026:3054-1Not reported
Susetiffrpmlinux enterprise server for sap applications 15 sp64.0.9-150000.45.69.1Not reportedSUSE-SU-2026:3054-1Not reported
Susetiffrpmlinux enterprise server 12 sp5-ltss4.0.9-44.115.1Not reportedSUSE-SU-2026:3027-1Not reported
Susetiffrpmlinux enterprise server ltss extended security 12 sp54.0.9-44.115.1Not reportedSUSE-SU-2026:3027-1Not reported
Opensusetiffrpmleap 16.04.7.2-160000.1.1Not reportedOPENSUSE-SU-2026:21289-1Not reported
Opensusetiff-manrpmleap 16.04.7.2-160000.1.1Not reportedOPENSUSE-SU-2026:21289-1Not reported
Susetiffrpmlinux enterprise module for basesystem 15 sp74.7.2-150600.3.29.1Not reportedSUSE-SU-2026:2853-1Not reported
Susetiffrpmlinux enterprise module for package hub 15 sp74.7.2-150600.3.29.1Not reportedSUSE-SU-2026:2853-1Not reported
Susetiffrpmlinux enterprise server 15 sp6-ltss4.7.2-150600.3.29.1Not reportedSUSE-SU-2026:2853-1Not reported
Susetiffrpmlinux enterprise server for sap applications 15 sp64.7.2-150600.3.29.1Not reportedSUSE-SU-2026:2853-1Not reported
Opensusetiffrpmtumbleweed4.7.2-1.1Not reportedOPENSUSE-SU-2026:11225-1Not reported

[Debian bug #1141320]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libtiff5-dev]Affected

    Source package: [tiff]

    Details (4)

    • 4.5.0-6+deb12u4 · amd64 · bookworm

      Affected

      nvd · tiff · debian · bookworm

    • 4.5.0-6+deb12u4 · arm64 · bookworm

      Affected

      nvd · tiff · debian · bookworm

    • 4.5.0-6+deb12u4 · amd64 · bookworm-security

      Affected

      nvd · tiff · debian · bookworm

    • 4.5.0-6+deb12u4 · arm64 · bookworm-security

      Affected

      nvd · tiff · debian · bookworm

  • [libtiff6]Affected

    Source package: [tiff]

    Details (4)

    • 4.5.0-6+deb12u4 · amd64 · bookworm

      Affected

      nvd · tiff · debian · bookworm

    • 4.5.0-6+deb12u4 · arm64 · bookworm

      Affected

      nvd · tiff · debian · bookworm

    • 4.5.0-6+deb12u4 · amd64 · bookworm-security

      Affected

      nvd · tiff · debian · bookworm

    • 4.5.0-6+deb12u4 · arm64 · bookworm-security

      Affected

      nvd · tiff · debian · bookworm

  • [libtiff-dev]Affected

    Source package: [tiff]

    Details (4)

    • 4.5.0-6+deb12u4 · amd64 · bookworm

      Affected

      nvd · tiff · debian · bookworm

    • 4.5.0-6+deb12u4 · arm64 · bookworm

      Affected

      nvd · tiff · debian · bookworm

    • 4.5.0-6+deb12u4 · amd64 · bookworm-security

      Affected

      nvd · tiff · debian · bookworm

    • 4.5.0-6+deb12u4 · arm64 · bookworm-security

      Affected

      nvd · tiff · debian · bookworm

  • [libtiff-doc]Affected

    Source package: [tiff]

    Details (4)

    • 4.5.0-6+deb12u4 · all · bookworm

      Affected

      nvd · tiff · debian · bookworm

    • 4.5.0-6+deb12u4 · all · bookworm

      Affected

      nvd · tiff · debian · bookworm

    • 4.5.0-6+deb12u4 · all · bookworm-security

      Affected

      nvd · tiff · debian · bookworm

    • 4.5.0-6+deb12u4 · all · bookworm-security

      Affected

      nvd · tiff · debian · bookworm

  • [libtiff-opengl]Affected

    Source package: [tiff]

    Details (4)

    • 4.5.0-6+deb12u4 · amd64 · bookworm

      Affected

      nvd · tiff · debian · bookworm

    • 4.5.0-6+deb12u4 · arm64 · bookworm

      Affected

      nvd · tiff · debian · bookworm

    • 4.5.0-6+deb12u4 · amd64 · bookworm-security

      Affected

      nvd · tiff · debian · bookworm

    • 4.5.0-6+deb12u4 · arm64 · bookworm-security

      Affected

      nvd · tiff · debian · bookworm

  • [libtiff-tools]Affected

    Source package: [tiff]

    Details (4)

    • 4.5.0-6+deb12u4 · amd64 · bookworm

      Affected

      nvd · tiff · debian · bookworm

    • 4.5.0-6+deb12u4 · arm64 · bookworm

      Affected

      nvd · tiff · debian · bookworm

    • 4.5.0-6+deb12u4 · amd64 · bookworm-security

      Affected

      nvd · tiff · debian · bookworm

    • 4.5.0-6+deb12u4 · arm64 · bookworm-security

      Affected

      nvd · tiff · debian · bookworm

  • [libtiffxx6]Affected

    Source package: [tiff]

    Details (4)

    • 4.5.0-6+deb12u4 · amd64 · bookworm

      Affected

      nvd · tiff · debian · bookworm

    • 4.5.0-6+deb12u4 · arm64 · bookworm

      Affected

      nvd · tiff · debian · bookworm

    • 4.5.0-6+deb12u4 · amd64 · bookworm-security

      Affected

      nvd · tiff · debian · bookworm

    • 4.5.0-6+deb12u4 · arm64 · bookworm-security

      Affected

      nvd · tiff · debian · bookworm

[openSUSE Tumbleweed]

  • [libtiff6]Unknown

    Source package: [tiff]

    Details (1)

    • 4.7.2-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 4.7.2-1.1

      Version impact unknown

      nvd · tiff · opensuse · tumbleweed

  • [libtiff6-32bit]Unknown

    Source package: [tiff]

    Details (1)

    • 4.7.2-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 4.7.2-1.1

      Version impact unknown

      nvd · tiff · opensuse · tumbleweed

  • [libtiff-devel]Unknown

    Source package: [tiff]

    Details (1)

    • 4.7.2-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 4.7.2-1.1

      Version impact unknown

      nvd · tiff · opensuse · tumbleweed

  • [libtiff-devel-32bit]Unknown

    Source package: [tiff]

    Details (1)

    • 4.7.2-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 4.7.2-1.1

      Version impact unknown

      nvd · tiff · opensuse · tumbleweed

  • [tiff]Fixed

    Source package: [tiff]

    Details (1)

    • 4.7.2-1.2 · x86_64 · tumbleweed

      Fixed · Fixed: 4.7.2-1.1

      nvd · tiff · opensuse · tumbleweed

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]