Wind River Support Network

HomeDefectsLIN1025-8577
Fixed

LIN1025-8577 : Security Advisory - tiff - CVE-2026-4775

Created: Mar 25, 2026    Updated: Aug 31, 2026
Resolved Date: Aug 31, 2026
Found In Version: 10.25.33.2
Fix Version: 10.25.33.11
Severity: Standard
Applicable for: Wind River Linux LTS 25
Component/s: Userspace

Description

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube