Nixpkgs security tracker

Login with GitHub

Suggestion detail

Untriaged
Permalink CVE-2026-18495
6.1 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): Required (R)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): Low (L)
  • Integrity (I): Low (L)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): Required (R)
  • Modified Confidentiality (MC): Low (L)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): Low (L)
  • Modified Availability (MA): High (H)
created 5 days, 11 hours ago Activity log
  • Created suggestion 5 days, 11 hours ago
Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough

A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit `StripByteCounts` value to be truncated to a 32-bit integer. This leads to an undersized memory allocation and a subsequent out-of-bounds memory copy, resulting in a crash and severe memory corruption.

Affected products

ceph
boost
libtiff
libtiff-main
  • *
mingw-libtiff
compat-libtiff3

Matching in nixpkgs

pkgs.booster

Fast and secure initramfs generator

  • nixos-unstable 0.12
    • nixpkgs-unstable 0.12
    • nixos-unstable-small 0.12
  • nixos-26.05 0.12
    • nixos-26.05-small 0.12
    • nixpkgs-26.05-darwin 0.12

pkgs.calceph

C library for interacting with binary planetary ephemeris files, such INPOPxx, JPL DExxx and SPICE

pkgs.libtiff

Library and utilities for working with the TIFF image file format

pkgs.xgboost

Scalable, Portable and Distributed Gradient Boosting (GBDT, GBRT or GBM) Library

pkgs.boost191

Collection of C++ libraries

  • nixos-unstable -

pkgs.catboost

High-performance library for gradient boosting on decision trees

pkgs.ceph-csi

Container Storage Interface (CSI) driver for Ceph RBD and CephFS

pkgs.boost-sml

Header only state machine library with no dependencies

pkgs.mev-boost

Ethereum block-building middleware

  • nixos-unstable 1.12
    • nixpkgs-unstable 1.12
    • nixos-unstable-small 1.12
  • nixos-26.05 1.12
    • nixos-26.05-small 1.12
    • nixpkgs-26.05-darwin 1.12

pkgs.xgboostWithCuda

Scalable, Portable and Distributed Gradient Boosting (GBDT, GBRT or GBM) Library

Package maintainers