A heap-based buffer overflow (CVE-2026-12912, CVSS 7.3 HIGH) in the compat-libtiff3 library allows remote code execution via a specially crafted PixarLog-compressed TIFF image. The vulnerability affects the libtiff3 package for specific Red Hat Enterprise Linux 8.8 extended support channels. Red Hat has released patched packages, and users should apply the update referenced in RHSA-2026:54638.
Red Hat Product Errata RHSA-2026:54638 - Security Advisory Issued: 2026-08-13 Updated: 2026-08-13 RHSA-2026:54638 - Security Advisory Overview Updated Packages Synopsis Important: compat-libtiff3 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for compat-libtiff3 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libtiff3 package provides libtiff 3, an older version of libtiff library for manipulating TIFF (Tagged Image File Format) image format files. This version should be used only if you are unable to use the current version of libtiff. Security Fix(es): libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 x86_64 Red Hat Enterprise Linux Server - TUS 8.8 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64 Fixes BZ - 2492871 - CVE-2026-12912 libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image CVEs CVE-2026-12912 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 SRPM compat-libtiff3-3.9.4-13.el8_8.3.src.rpm SHA-256: a1b654d7d74e027ca9b8d20cdd8f75546d97dee7c403911cdee026fcc7f7fbb7 x86_64 compat-libtiff3-3.9.4-13.el8_8.3.i686.rpm SHA-256: bfc97de33f79075ad489e953eabda539c8068d85d41d6c7331b7927917dbf823 compat-libtiff3-3.9.4-13.el8_8.3.x86_64.rpm SHA-256: 8c82820a46425c7b317178b18c0f52e51e8af77a25fe5377a568b66738ee7387 compat-libtiff3-debuginfo-3.9.4-13.el8_8.3.i686.rpm SHA-256: e8151a17fd527b0d0929cb53ea379edcc6e8ba98a515f9fa1fc85bd668472314 compat-libtiff3-debuginfo-3.9.4-13.el8_8.3.x86_64.rpm SHA-256: 1affdd334f2862f853260607cde62b2e6532c333c904729b21ce78c18c06e82e compat-libtiff3-debugsource-3.9.4-13.el8_8.3.i686.rpm SHA-256: 068fbf3404ee0788c8d6242c1450ad246c4e22074eb76ed963d84101b456a4d7 compat-libtiff3-debugsource-3.9.4-13.el8_8.3.x86_64.rpm SHA-256: 6ad21b909f0b209a89d93a85dfc6ee362a3868d4b6b8c2be6bd90ede90f7614a Red Hat Enterprise Linux Server - TUS 8.8 SRPM compat-libtiff3-3.9.4-13.el8_8.3.src.rpm SHA-256: a1b654d7d74e027ca9b8d20cdd8f75546d97dee7c403911cdee026fcc7f7fbb7 x86_64 compat-libtiff3-3.9.4-13.el8_8.3.i686.rpm SHA-256: bfc97de33f79075ad489e953eabda539c8068d85d41d6c7331b7927917dbf823 compat-libtiff3-3.9.4-13.el8_8.3.x86_64.rpm SHA-256: 8c82820a46425c7b317178b18c0f52e51e8af77a25fe5377a568b66738ee7387 compat-libtiff3-debuginfo-3.9.4-13.el8_8.3.i686.rpm SHA-256: e8151a17fd527b0d0929cb53ea379edcc6e8ba98a515f9fa1fc85bd668472314 compat-libtiff3-debuginfo-3.9.4-13.el8_8.3.x86_64.rpm SHA-256: 1affdd334f2862f853260607cde62b2e6532c333c904729b21ce78c18c06e82e compat-libtiff3-debugsource-3.9.4-13.el8_8.3.i686.rpm SHA-256: 068fbf3404ee0788c8d6242c1450ad246c4e22074eb76ed963d84101b456a4d7 compat-libtiff3-debugsource-3.9.4-13.el8_8.3.x86_64.rpm SHA-256: 6ad21b909f0b209a89d93a85dfc6ee362a3868d4b6b8c2be6bd90ede90f7614a Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 SRPM compat-libtiff3-3.9.4-13.el8_8.3.src.rpm SHA-256: a1b654d7d74e027ca9b8d20cdd8f75546d97dee7c403911cdee026fcc7f7fbb7 ppc64le compat-libtiff3-3.9.4-13.el8_8.3.ppc64le.rpm SHA-256: cccd72119044178f76a8287f5d065bbe76dde6f690e14490bbd33828ce63bc6d compat-libtiff3-debuginfo-3.9.4-13.el8_8.3.ppc64le.rpm SHA-256: 947c59e7d2db322d37f4cfefc3654cffd080183013cc74fae80366177c18e48e compat-libtiff3-debugsource-3.9.4-13.el8_8.3.ppc64le.rpm SHA-256: 6d33d203ce7cc3b47c5b7212d7d2c16bca7e46b46587e164f8ed5b360393cd49 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 SRPM compat-libtiff3-3.9.4-13.el8_8.3.src.rpm SHA-256: a1b654d7d74e027ca9b8d20cdd8f75546d97dee7c403911cdee026fcc7f7fbb7 x86_64 compat-libtiff3-3.9.4-13.el8_8.3.i686.rpm SHA-256: bfc97de33f79075ad489e953eabda539c8068d85d41d6c7331b7927917dbf823 compat-libtiff3-3.9.4-13.el8_8.3.x86_64.rpm SHA-256: 8c82820a46425c7b317178b18c0f52e51e8af77a25fe5377a568b66738ee7387 compat-libtiff3-debuginfo-3.9.4-13.el8_8.3.i686.rpm SHA-256: e8151a17fd527b0d0929cb53ea379edcc6e8ba98a515f9fa1fc85bd668472314 compat-libtiff3-debuginfo-3.9.4-13.el8_8.3.x86_64.rpm SHA-256: 1affdd334f2862f853260607cde62b2e6532c333c904729b21ce78c18c06e82e compat-libtiff3-debugsource-3.9.4-13.el8_8.3.i686.rpm SHA-256: 068fbf3404ee0788c8d6242c1450ad246c4e22074eb76ed963d84101b456a4d7 compat-libtiff3-debugsource-3.9.4-13.el8_8.3.x86_64.rpm SHA-256: 6ad21b909f0b209a89d93a85dfc6ee362a3868d4b6b8c2be6bd90ede90f7614a The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .