Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
CVE-2026-36849: GDAL, TIFF, Neuron, QtWebEngine, Texmaker can crash from malformed images
CVE-2026-36849 · published 4 months ago
Summary
A specially crafted TIFF file that reports an unrealistically large SamplesPerPixel value can cause the affected programs to stop responding or shut down. This affects GDAL, the TIFF library, Neuron, QtWebEngine, and Texmaker, potentially disrupting any workflow that processes such images. Update each program to the latest released version, which includes the fix, or avoid opening untrusted TIFF files until the update is applied.
What to do
- Update bellsoft tiff to version 4.7.2-r0.
- Update debian rootio-tiff to version 4.2.0-1+deb11u8.aikido.17.
- Update debian tiff to version 4.7.0-3+deb13u3.aikido.8.
- Update debian rootio-tiff to version 4.7.0-3+deb13u3.aikido.8.
- Update debian tiff to version 4.2.0-1+deb11u8.aikido.18.
- Update debian tiff to version 4.5.0-6+deb12u4.aikido.22.
- Update debian rootio-tiff to version 4.5.0-6+deb12u4.aikido.22.
- Update debian rootio-tiff to version 4.2.0-1+deb11u8.aikido.18.
- Update debian rootio-tiff to version 4.5.0-6+deb12u4.aikido.20.
- Update debian tiff to version 4.5.0-6+deb12u4.aikido.21.
- Update debian rootio-tiff to version 4.5.0-6+deb12u4.aikido.21.
- Update debian tiff to version 4.7.0-3+deb13u3.aikido.10.
- Update debian rootio-tiff to version 4.7.0-3+deb13u3.aikido.10.
- Update debian tiff to version 4.7.0-3+deb13u3.aikido.9.
- Update debian rootio-tiff to version 4.7.0-3+deb13u3.aikido.9.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:14.04:LTS | canonical | gdal | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | tiff | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | tiff | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | gdal | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | tiff | All versions |
| Ubuntu:18.04:LTS | canonical | neuron | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | qtwebengine-opensource-src | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | texmaker | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | tiff | All versions |
| Ubuntu:20.04:LTS | canonical | neuron | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | qtwebengine-opensource-src | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | texmaker | All versions |
| Ubuntu:22.04:LTS | canonical | neuron | All versions |
| Ubuntu:22.04:LTS | canonical | tiff | All versions |
| Ubuntu:Pro:22.04:LTS | canonical | qtwebengine-opensource-src | All versions |
| Ubuntu:Pro:22.04:LTS | canonical | texmaker | All versions |
| Ubuntu:24.04:LTS | canonical | tiff | All versions |
| Ubuntu:Pro:24.04:LTS | canonical | qtwebengine-opensource-src | All versions |
| Ubuntu:Pro:24.04:LTS | canonical | texmaker | All versions |
| Ubuntu:25.10 | canonical | qtwebengine-opensource-src | All versions |
| Ubuntu:25.10 | canonical | texmaker | All versions |
| Ubuntu:25.10 | canonical | tiff | All versions |
| Ubuntu:26.04:LTS | canonical | tiff | All versions |
| Ubuntu:Pro:26.04:LTS | canonical | qtwebengine-opensource-src | All versions |
| Alpaquita:stream | bellsoft | tiff |
>= 4.4.0-r1, < 4.7.2-r0 Fix: upgrade to 4.7.2-r0
|
| Root:Debian:11 | debian | rootio-tiff |
< 4.2.0-1+deb11u8.aikido.17 < 4.2.0-1+deb11u8.aikido.18 Fix: upgrade to 4.2.0-1+deb11u8.aikido.17
|
| Root:Debian:13 | debian | tiff |
< 4.7.0-3+deb13u3.aikido.8 < 4.7.0-3+deb13u3.aikido.10 < 4.7.0-3+deb13u3.aikido.9 Fix: upgrade to 4.7.0-3+deb13u3.aikido.8
|
| Root:Debian:13 | debian | rootio-tiff |
< 4.7.0-3+deb13u3.aikido.8 < 4.7.0-3+deb13u3.aikido.10 < 4.7.0-3+deb13u3.aikido.9 Fix: upgrade to 4.7.0-3+deb13u3.aikido.8
|
| Root:Debian:11 | debian | tiff |
< 4.2.0-1+deb11u8.aikido.18 Fix: upgrade to 4.2.0-1+deb11u8.aikido.18
|
| Root:Debian:12 | debian | tiff |
< 4.5.0-6+deb12u4.aikido.22 < 4.5.0-6+deb12u4.aikido.21 Fix: upgrade to 4.5.0-6+deb12u4.aikido.22
|
| Root:Debian:12 | debian | rootio-tiff |
< 4.5.0-6+deb12u4.aikido.22 < 4.5.0-6+deb12u4.aikido.20 < 4.5.0-6+deb12u4.aikido.21 Fix: upgrade to 4.5.0-6+deb12u4.aikido.22
|
| BellSoft Hardened Containers:stream | bellsoft | tiff |
>= 4.4.0-r1, < 4.7.2-r0 Fix: upgrade to 4.7.2-r0
|
Original advisory text
[Denial of Service via large SamplesPerPixel tag]
[Denial of Service via large SamplesPerPixel tag]
References
- https://gitlab.com/libtiff/libtiff/-/work_items/781 Third Party Advisory
- https://docs.bell-sw.com/security/cves/CVE-2026-36849 Vendor Advisory
- https://ubuntu.com/security/CVE-2026-36849 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-36849 Third Party Advisory
- https://www.openwall.com/lists/oss-security/2026/06/17/1 Third Party Advisory
Timeline
Published18 Jun 2026
Updated11 Sep 2026
First seen18 Jun 2026
Track software like this
Free during beta