CVE-2026-52492

Name of the Vulnerable Software and Affected Versions libtiff (affected versions not specified)

Description An integer overflow occurs in the cvtRaster() function of the rgb2ycbcr utility when calculating strip buffer sizes. This can lead to an undersized heap allocation, resulting in a heap-based buffer overflow when processing a specially crafted TIFF image during YCbCr conversion. YCbCr is a color space used in digital images and videos to separate brightness from color information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.