High severity7.5NVD Advisory· Published Jun 25, 2026· Updated Jun 26, 2026
CVE-2026-46602
CVE-2026-46602
Description
The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumption.
Affected products
71- osv-coords70 versionspkg:apk/chainguard/seaweedfs-rocksdb-fipspkg:apk/wolfi/mattermost-10.11pkg:apk/chainguard/mattermost-fips-11.1pkg:apk/chainguard/listmonkpkg:apk/chainguard/mattermost-11.8pkg:apk/chainguard/mattermost-fips-10.11pkg:apk/chainguard/ollama-fipspkg:apk/wolfi/filebrowserpkg:apk/wolfi/kubescapepkg:apk/wolfi/mailpitpkg:apk/wolfi/mattermost-11.1pkg:apk/chainguard/hugo-fipspkg:apk/chainguard/mailpit-fipspkg:apk/chainguard/rclonepkg:apk/chainguard/seaweedfs-operatorpkg:apk/chainguard/seaweedfs-operator-fipspkg:apk/wolfi/seaweedfspkg:apk/wolfi/tailscalepkg:apk/chainguard/mailpitpkg:apk/chainguard/mattermost-11.1pkg:apk/chainguard/pdfcpupkg:apk/chainguard/bento-fipspkg:apk/chainguard/cgpkg:apk/chainguard/chainctlpkg:apk/chainguard/chainctl-fipspkg:apk/chainguard/filebrowserpkg:apk/chainguard/gatuspkg:apk/chainguard/gatus-fipspkg:apk/chainguard/giteapkg:apk/chainguard/gitlab-workhorse-ce-18.11pkg:apk/chainguard/gitlab-workhorse-ce-18.9pkg:apk/chainguard/gitlab-workhorse-ce-19.0pkg:apk/chainguard/gitlab-workhorse-ce-19.1pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.11pkg:apk/chainguard/gitlab-workhorse-ce-fips-19.0pkg:apk/chainguard/gitlab-workhorse-ce-fips-19.1pkg:apk/chainguard/glabpkg:apk/chainguard/hugopkg:apk/chainguard/hugo-extendedpkg:apk/chainguard/kubescapepkg:apk/chainguard/kubescape-server-fipspkg:apk/chainguard/kubescape-server-fips-downloaderpkg:apk/chainguard/mattermost-11.6pkg:apk/chainguard/mattermost-11.7pkg:apk/chainguard/mattermost-fips-11.6pkg:apk/chainguard/ollamapkg:apk/chainguard/seaweedfs-fipspkg:apk/chainguard/seaweedfs-rocksdbpkg:apk/chainguard/tailscalepkg:apk/wolfi/bentopkg:apk/wolfi/gatuspkg:apk/wolfi/hugo-extendedpkg:apk/wolfi/ollamapkg:apk/chainguard/kubescape-serverpkg:apk/chainguard/kubescape-server-downloaderpkg:apk/chainguard/mattermost-10.11pkg:apk/chainguard/rclone-fipspkg:apk/wolfi/mattermost-11.6pkg:apk/wolfi/rclonepkg:apk/chainguard/gitea-fipspkg:apk/chainguard/bentopkg:apk/chainguard/mattermost-fips-11.8pkg:apk/chainguard/seaweedfspkg:apk/wolfi/giteapkg:apk/wolfi/glabpkg:apk/wolfi/pdfcpupkg:apk/chainguard/mattermost-fips-11.7pkg:apk/wolfi/hugopkg:apk/wolfi/mattermost-11.7pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Leap%2016.0
< 4.36-r2+ 69 more
- (no CPE)range: < 4.36-r2
- (no CPE)range: < 10.11.21-r1
- (no CPE)range: < 11.10.0-r0
- (no CPE)range: < 6.2.0-r1
- (no CPE)range: < 11.8.3-r1
- (no CPE)range: < 10.11.21-r2
- (no CPE)range: < 0
- (no CPE)range: < 2.63.16-r1
- (no CPE)range: < 0
- (no CPE)range: < 1.30.2-r1
- (no CPE)range: < 11.10.0-r0
- (no CPE)range: < 0.163.3-r2
- (no CPE)range: < 1.30.2-r1
- (no CPE)range: < 1.74.3-r5
- (no CPE)range: < 1.0.29-r2
- (no CPE)range: < 1.0.29-r1
- (no CPE)range: < 4.36-r2
- (no CPE)range: < 0
- (no CPE)range: < 1.30.2-r1
- (no CPE)range: < 11.10.0-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 2.63.16-r1
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 18.11.6-r1
- (no CPE)range: < 18.9.8-r4
- (no CPE)range: < 19.0.3-r1
- (no CPE)range: < 19.1.1-r1
- (no CPE)range: < 18.11.6-r1
- (no CPE)range: < 19.0.3-r3
- (no CPE)range: < 19.1.1-r1
- (no CPE)range: < 0
- (no CPE)range: < 0.163.3-r1
- (no CPE)range: < 0.163.3-r1
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 11.6.6-r1
- (no CPE)range: < 11.7.6-r3
- (no CPE)range: < 11.6.6-r1
- (no CPE)range: < 0
- (no CPE)range: < 4.36-r3
- (no CPE)range: < 4.36-r2
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0.163.3-r1
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 10.11.21-r1
- (no CPE)range: < 1.74.3-r2
- (no CPE)range: < 11.6.6-r1
- (no CPE)range: < 1.74.3-r5
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 11.8.2-r2
- (no CPE)range: < 4.36-r2
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 11.7.6-r1
- (no CPE)range: < 0.163.3-r1
- (no CPE)range: < 11.7.6-r3
- (no CPE)range: < 0.0.20260723T184607-160000.1.1
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.