CVE-2026-52491

A flaw was found in libtiff. An attacker could exploit this vulnerability by processing a specially crafted file, leading to arbitrary code execution. This issue occurs within the thumbnail.c: main() component. Successful exploitation could allow the attacker to take control of the affected system.

This vulnerability is rated as Important because successful exploitation can allow arbitrary code execution within the security context of the executing user. The defect is confined to the standalone thumbnail binary rather than the core libtiff shared library. As a result, applications linking against libtiff are not exposed, limiting the risk to environments where the command-line tool processes untrusted image files.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.