Threat Investigation
Request a demo

CVE-2026-52490

Critical

Description

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c

SeverityCritical
CVSS9.8
Exploit probability—
ProductLibtiff
PublishedAug 24, 2026
First seenAug 24, 2026
Weakness typeCWE-94Code injection

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
libtiff85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.