CVE-2026-18495 Red Hat — Exploit & Vulnerability Details MEDIUM

Parameter	Value
CVSS	6.1 (MEDIUM)
Type	CWE-122 (Heap-based Buffer Overflow)
Vendor	Red Hat
Public PoC	No

A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit `StripByteCounts` value to be truncated to a 32-bit integer.

This leads to an undersized memory allocation and a subsequent out-of-bounds memory copy, resulting in a crash and severe memory corruption.

Attack Parameters

Attack Vector

Local

Requires local access

Attack Complexity

Low

Easy to exploit

Privileges Required

Low

Basic privileges needed

User Interaction

Required

User action required

Impact Assessment

Confidentiality

Low

Partial data leak

Integrity

Low

Partial data modification

Availability

High

Complete denial of service

CVSS Vector v3.1

Weakness Type (CWE)

CWE-122 Heap-based Buffer Overflow

Vulnerable Products

red hat:red hat ceph storage 4 red hat:red hat ceph storage 8 red hat:red hat ceph storage 9 red hat:red hat enterprise linux 9 red hat:red hat hardened images red hat:red hat ceph storage 7 red hat:red hat enterprise linux 6 red hat:red hat enterprise linux 7 red hat:red hat ceph storage 6 red hat:red hat enterprise linux 8 red hat:red hat enterprise linux 10