CVE detail
CVE-2026-4775
A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 30.0 · diversity 13.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
31 source links · newest first
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4775.jsonsecurity.access.redhat.com
No excerpt available.
Vendor Advisorysecurity.access.redhat.comMar 24, 2026, 3:16 PM No excerpt available.
Vendor Advisorylists.debian.orgMar 24, 2026, 3:16 PM- https://bugzilla.redhat.com/show_bug.cgi?id=2450768bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/security/cve/CVE-2026-4775access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:33388access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:30349access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:30089access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:30088access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:30087access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:30078access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:25910access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:25096access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:24992access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:20592access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:20591access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:20585access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:20583access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:19702access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:19659access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:19657access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:19609access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:19608access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:19604access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:19586access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:19585access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:19363access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:19150access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:16055access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:14929access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:12271access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:12265access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 3:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2020-35523CVSS 7.8 · High
An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted…
- CVE-2026-5121CVSS 7.5 · High
A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by pro…
- CVE-2025-62231CVSS 7.3 · High
A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If…
- CVE-2023-6478CVSS 7.6 · High
A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure o…
- CVE-2023-41175CVSS 6.5 · Medium
A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c. This flaw allows remote attackers to cause a denial of service or possibly execute…
- CVE-2023-40745CVSS 6.5 · Medium
LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafte…