CVE-2026-12912

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).

This is an Important heap-based buffer overflow in libtiff affecting applications that explicitly configure the library to decode Pixarlog-compressed TIFF images using the PIXARLOGDATAFMT_8BITABGR output format with SamplesPerPixel == 3. Standard image reading functions, such as TIFFReadRGBAImage, are not directly impacted as they do not typically select this specific format. Exploitation requires processing a specially crafted TIFF image under these specific conditions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, applications processing untrusted TIFF images should avoid explicitly configuring PIXARLOGDATAFMT_8BITABGR when decoding PixarLog-compressed TIFF images with three samples per pixel. This specific combination of output format and samples per pixel is required to trigger the heap-based buffer overflow.