CVE-2026-52490
Published: August 24th, 2026
An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c
CRITICAL
CVSS v3: 9.8
CVSS v3: 9.8
Status
| DocFilters Release | Package | State | Justification | Comment |
|---|---|---|---|---|
| daily | libtiff (4.6.0) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 26.3 | libtiff (4.6.0) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 26.2 | libtiff (4.6.0) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 26.1 | libtiff (4.6.0) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 25.4 | libtiff (4.6.0) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 25.3 | libtiff (4.6.0) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 25.2 | libtiff (4.6.0) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 25.1 | libtiff (4.6.0) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 24.4 | libtiff (4.6.0) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 24.4.0 | libtiff (4.6.0) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 24.3 | libtiff (4.6.0) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 24.2 | libtiff (4.6.0) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 24.1 | libtiff (4.6.0) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 23.3 | libtiff (4.5.1) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 23.2 | libtiff (4.3.0) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 23.1 | libtiff (4.3.0) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 22.4 | libtiff (4.3.0) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 22.3 | libtiff (4.3.0) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 22.2 | libtiff (4.3.0) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 22.1 | libtiff (4.0.8) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 21.11 | libtiff (4.0.8) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 21.8 | libtiff (4.0.8) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 21.5.0 | libtiff (4.0.8) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 21.2.0 | libtiff (4.0.8) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 11.4.19.3667 | libtiff (4.0.8) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 11.4.18.3599 | libtiff (4.0.8) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 11.4.16.3445 | libtiff (4.0.8) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 11.4.15.3368 | libtiff (4.0.8) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 11.4.14.3263 | libtiff (4.0.8) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 11.4.13.3179 | libtiff (4.0.8) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 11.4.12.3054 | libtiff (4.0.8) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 11.4.11.3040 | libtiff (4.0.8) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 11.4.11.2990 | libtiff (4.0.8) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 11.4.10.2934 | libtiff (4.0.8) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 11.4.9.2878 | libtiff (4.0.8) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
| 11.4.8.2822 | libtiff (4.0.8) | Not Affected | Code Not Present | The flaw is in libtiff’s tiffcrop command-line tool, not the library. Document Filters uses only the library. |
Severity score breakdown
Attack Complexity
LOW
Attack Vector
NETWORK
Availability Impact
HIGH
Base Score
9.8
Base Severity
CRITICAL
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Privileges Required
NONE
Scope
UNCHANGED
User Interaction
NONE
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Version
3.1