Critical severity9.8NVD Advisory· Published Aug 24, 2026· Updated Sep 9, 2026

CVE-2026-52490

Description

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

LibTIFF/Libtiffllm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)
osv-coords3 versions
pkg:rpm/almalinux/libtiff pkg:rpm/almalinux/libtiff-devel pkg:rpm/almalinux/libtiff-tools
< 4.0.9-39.el8_10+ 2 more
- (no CPE)range: < 4.0.9-39.el8_10
- (no CPE)range: < 4.0.9-39.el8_10
- (no CPE)range: < 4.0.9-39.el8_10

Patches

Vulnerability mechanics

References

gist.github.com/okyfh/122c2d72e991a78c8af80a3af3be8671nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000