libTIFF: Schwachstelle ermöglicht Codeausführung und Denial of Service
NEOSEC enrichment — no mirror of the original source
Ein lokaler Angreifer kann eine Schwachstelle in libTIFF ausnutzen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-21221 linked CVE
Open advisory with all CVEs
More on libTIFF
Other advisories
- Not ratedosv:CVE-2026-112902Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags
- CriticalCVE-2026-112902Pillow is a Python imaging library. In versions through 12.3.0, the libtiff TIFF encoder can pass arguments to TIFFSetField() that do not match libtiff’s d…
- Not ratedosv:CLEANSTART-2025-HE69905LibTIFF version 4
- Not ratedosv:CLEANSTART-2025-IG51350LibTIFF 4
- Not ratedosv:CLEANSTART-2025-WH39630LibTIFF 4
- Not ratedosv:CLEANSTART-2025-WI99204LibTIFF 4
- Not ratedosv:CLEANSTART-2025-XF01201In LibTIFF 4
- Not ratedosv:CLEANSTART-2025-AJ33584In LibTIFF 4
Other news entries
- libTIFF: Schwachstelle ermöglicht Denial of ServiceVulnerabilityBSI CERT-Bund
- libTIFF: Schwachstelle ermöglicht CodeausführungVulnerabilityBSI CERT-Bund
- libTIFF: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- libTIFF: Schwachstelle ermöglicht Denial of ServiceVulnerabilityBSI CERT-Bund
- libTIFF: Schwachstelle ermöglicht CodeausführungVulnerabilityBSI CERT-Bund
- libTIFF: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- libTIFF: Mehrere Schwachstellen ermöglichen Denial of ServiceVulnerabilityBSI CERT-Bund
- libTIFF: Mehrere Schwachstellen ermöglichen Denial of ServiceVulnerabilityBSI CERT-Bund
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2122
ID