PT-2026-41620 · Julia · Libtiff Jll

Published 2026-05-07 · Updated 2026-05-07

OSV

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.

Related Identifiers

JLSEC-2026-485

Affected Products

Libtiff Jll

References · 6

• https://osv.dev/vulnerability/JLSEC-2026-485 · Vendor Advisory
• https://gist.github.com/optionGo/5ad17e96a0a40f03578dd6c9f8645952 · Note
• https://gitlab.com/libtiff/libtiff/-/commit/88cf9dbb48f6e172629795ecffae35d5052f68aa · Note
• https://gitlab.com/libtiff/libtiff/-/commit/09f53a86cf26dfd961925227e59e180db617f26d · Note
• https://gitlab.com/libtiff/libtiff/-/issues/740 · Note
• https://gitlab.com/libtiff/libtiff/-/merge_requests/757 · Note