CVE-2026-52490

CriticalCVSS 9.8

Published: 24/08/2026(UTC)Updated: 25/08/2026(UTC)Translated: 25/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

5th percentile - higher than 5% of all known CVEs

Summary

A vulnerability in the libtiff library allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c.

Risk Assessment

An attacker can take control of systems processing TIFF images, potentially leading to full system compromise.

Recommendation

Immediately update libtiff to the latest patched version.

Original NVD description (English source)

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c