CVE Catalog

CVE-2026-46604

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.35%

27th percentile — higher than 27% of all known CVEs

Summary

The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset.

Risk Assessment

An attacker could exploit this vulnerability to crash applications processing TIFF images, leading to a denial of service (DoS).

Recommendation

Update the TIFF library to the latest version that includes a fix for the out-of-bounds strip offset error.

Original NVD description (English source)

The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS