Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-52492 →

DEBIAN-CVE-2026-52492

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result in an undersized heap allocat...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 tiff

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 tiff

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 tiff

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Références

advisory security-tracker.debian.org