CVE-2026-18495
Medium · 6.1CVSS
6.1
EPSS
0.1%
Published
Sep 11, 2026
CISA due date
—
The record
A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit `StripByteCounts` value to be truncated to a 32-bit integer. This leads to an undersized memory allocation and a subsequent out-of-bounds memory copy, resulting in a crash and severe memory corruption.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-44236 rabbitmq-c is a C-language AMQP client library for RabbitMQ. CWE-122
- CVE-2026-19499 Calling strfmon and strfmon_l in the GNU C Library version 2.38 to 2.44 can write past… CWE-122
- CVE-2026-54241 libde265 is an open source implementation of the h.265 video codec. CWE-122
- CVE-2026-68514 OpenEXR is the reference implementation and specification for the EXR image file format… CWE-122
- CVE-2026-68515 OpenEXR is the reference implementation and specification for the EXR image format… CWE-122
- CVE-2026-68513 OpenEXR is the reference implementation and specification for the EXR image format… CWE-122
- CVE-2026-59186 OpenEXR is the reference implementation and specification for the EXR image format… CWE-122
- CVE-2026-59187 OpenEXR is the reference implementation and specification for the EXR image format… CWE-122