{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Hardened Images RPMs is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update includes the following RPMs:\n\nlibtiff:\n  * libtiff-4.7.2-2.hum1 (aarch64, x86_64)\n  * libtiff-devel-4.7.2-2.hum1 (aarch64, x86_64)\n  * libtiff-static-4.7.2-2.hum1 (aarch64, x86_64)\n  * libtiff-tools-4.7.2-2.hum1 (aarch64, x86_64)\n  * libtiff-4.7.2-2.hum1.src (src)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:53467",
        "url": "https://access.redhat.com/errata/RHSA-2026:53467"
      },
      {
        "category": "external",
        "summary": "https://images.redhat.com/",
        "url": "https://images.redhat.com/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-52492",
        "url": "https://access.redhat.com/security/cve/CVE-2026-52492"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-52490",
        "url": "https://access.redhat.com/security/cve/CVE-2026-52490"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-52491",
        "url": "https://access.redhat.com/security/cve/CVE-2026-52491"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-18495",
        "url": "https://access.redhat.com/security/cve/CVE-2026-18495"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53467.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
    "tracking": {
      "current_release_date": "2026-09-11T19:12:43+00:00",
      "generator": {
        "date": "2026-09-11T19:12:43+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.21"
        }
      },
      "id": "RHSA-2026:53467",
      "initial_release_date": "2026-08-11T12:55:57+00:00",
      "revision_history": [
        {
          "date": "2026-08-11T12:55:57+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-10T18:08:55+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-11T19:12:43+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libtiff-main@aarch64",
                "product": {
                  "name": "libtiff-main@aarch64",
                  "product_id": "libtiff-main@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libtiff@4.7.2-2.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libtiff-main@src",
                "product": {
                  "name": "libtiff-main@src",
                  "product_id": "libtiff-main@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libtiff@4.7.2-2.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libtiff-main@x86_64",
                "product": {
                  "name": "libtiff-main@x86_64",
                  "product_id": "libtiff-main@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libtiff@4.7.2-2.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-main@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:libtiff-main@aarch64"
        },
        "product_reference": "libtiff-main@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-main@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:libtiff-main@src"
        },
        "product_reference": "libtiff-main@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-main@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:libtiff-main@x86_64"
        },
        "product_reference": "libtiff-main@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Jinbao Chen"
          ]
        }
      ],
      "cve": "CVE-2026-18495",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2026-07-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2531414"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit `StripByteCounts` value to be truncated to a 32-bit integer. This leads to an undersized memory allocation and a subsequent out-of-bounds memory copy, resulting in a crash and severe memory corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libtiff: libtiff: heap-buffer overflow via numeric truncation in the JPEG raw passthrough",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate impact heap-buffer overflow in libtiff\u0027s `tiff2pdf` utility can lead to a denial of service or potential memory corruption when processing specially crafted BigTIFF files. The flaw arises from an integer truncation during strip length calculation, resulting in an undersized buffer. Exploitation requires local access and user interaction, such as opening a malicious file.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:libtiff-main@aarch64",
          "Red Hat Hardened Images:libtiff-main@src",
          "Red Hat Hardened Images:libtiff-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18495"
        },
        {
          "category": "external",
          "summary": "RHBZ#2531414",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531414"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18495",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18495"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18495",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18495"
        },
        {
          "category": "external",
          "summary": "https://gitlab.com/libtiff/libtiff/-/merge_requests/729",
          "url": "https://gitlab.com/libtiff/libtiff/-/merge_requests/729"
        },
        {
          "category": "external",
          "summary": "https://gitlab.com/libtiff/libtiff/-/tree/67fd283d276f09db54dc39b9ef7b979d4b45c4b1",
          "url": "https://gitlab.com/libtiff/libtiff/-/tree/67fd283d276f09db54dc39b9ef7b979d4b45c4b1"
        }
      ],
      "release_date": "2026-08-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-11T12:55:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:libtiff-main@aarch64",
            "Red Hat Hardened Images:libtiff-main@src",
            "Red Hat Hardened Images:libtiff-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:53467"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:libtiff-main@aarch64",
            "Red Hat Hardened Images:libtiff-main@src",
            "Red Hat Hardened Images:libtiff-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libtiff: libtiff: heap-buffer overflow via numeric truncation in the JPEG raw passthrough"
    },
    {
      "cve": "CVE-2026-52490",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-08-24T21:01:06.563366+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2523148"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libtiff. An attacker can exploit a vulnerability in the `process_command_opts()` function within `tools/tiffcrop.c` to execute arbitrary code. This could lead to a complete compromise of the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libtiff: libtiff: Arbitrary code execution via process_command_opts() function",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:libtiff-main@aarch64",
          "Red Hat Hardened Images:libtiff-main@src",
          "Red Hat Hardened Images:libtiff-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-52490"
        },
        {
          "category": "external",
          "summary": "RHBZ#2523148",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2523148"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-52490",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-52490"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-52490",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52490"
        },
        {
          "category": "external",
          "summary": "https://gist.github.com/okyfh/122c2d72e991a78c8af80a3af3be8671",
          "url": "https://gist.github.com/okyfh/122c2d72e991a78c8af80a3af3be8671"
        },
        {
          "category": "external",
          "summary": "https://gitlab.com/libtiff/libtiff/-/work_items/846",
          "url": "https://gitlab.com/libtiff/libtiff/-/work_items/846"
        }
      ],
      "release_date": "2026-08-24T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-11T12:55:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:libtiff-main@aarch64",
            "Red Hat Hardened Images:libtiff-main@src",
            "Red Hat Hardened Images:libtiff-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:53467"
        },
        {
          "category": "workaround",
          "details": "Avoid using the `tiffcrop` utility to process TIFF image files from untrusted sources. If the `libtiff-tools` package, which provides `tiffcrop`, is not required, consider removing it to prevent exploitation.",
          "product_ids": [
            "Red Hat Hardened Images:libtiff-main@aarch64",
            "Red Hat Hardened Images:libtiff-main@src",
            "Red Hat Hardened Images:libtiff-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:libtiff-main@aarch64",
            "Red Hat Hardened Images:libtiff-main@src",
            "Red Hat Hardened Images:libtiff-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libtiff: libtiff: Arbitrary code execution via process_command_opts() function"
    },
    {
      "cve": "CVE-2026-52491",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-08-25T21:21:51.091009+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2524131"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libtiff. An attacker could exploit this vulnerability by processing a specially crafted file, leading to arbitrary code execution. This issue occurs within the `thumbnail.c: main()` component. Successful exploitation could allow the attacker to take control of the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libtiff: libtiff: Arbitrary code execution via thumbnail.c: main() component",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:libtiff-main@aarch64",
          "Red Hat Hardened Images:libtiff-main@src",
          "Red Hat Hardened Images:libtiff-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-52491"
        },
        {
          "category": "external",
          "summary": "RHBZ#2524131",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524131"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-52491",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-52491"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-52491",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52491"
        },
        {
          "category": "external",
          "summary": "https://gist.github.com/okyfh/5cc53fa67d229017231cf18c91768bd9",
          "url": "https://gist.github.com/okyfh/5cc53fa67d229017231cf18c91768bd9"
        },
        {
          "category": "external",
          "summary": "https://gitlab.com/libtiff/libtiff/-/commit/9ce4d089bcf25496663776d9e6336738112f09a3",
          "url": "https://gitlab.com/libtiff/libtiff/-/commit/9ce4d089bcf25496663776d9e6336738112f09a3"
        }
      ],
      "release_date": "2026-08-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-11T12:55:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:libtiff-main@aarch64",
            "Red Hat Hardened Images:libtiff-main@src",
            "Red Hat Hardened Images:libtiff-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:53467"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:libtiff-main@aarch64",
            "Red Hat Hardened Images:libtiff-main@src",
            "Red Hat Hardened Images:libtiff-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libtiff: libtiff: Arbitrary code execution via thumbnail.c: main() component"
    },
    {
      "cve": "CVE-2026-52492",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-08-24T20:41:11.373403+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2523134"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libtiff. An integer overflow vulnerability exists in the `cvtRaster()` function of the `rgb2ycbcr` utility. When processing a specially crafted TIFF image during YCbCr conversion, an attacker could trigger an undersized heap allocation, leading to a heap-based buffer overflow. This could potentially allow for arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libtiff: libtiff: Arbitrary code execution via crafted TIFF image",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:libtiff-main@aarch64",
          "Red Hat Hardened Images:libtiff-main@src",
          "Red Hat Hardened Images:libtiff-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-52492"
        },
        {
          "category": "external",
          "summary": "RHBZ#2523134",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2523134"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-52492",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-52492"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-52492",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52492"
        },
        {
          "category": "external",
          "summary": "https://gist.github.com/okyfh/fbc5a37cade358361d80f6a498560cfa",
          "url": "https://gist.github.com/okyfh/fbc5a37cade358361d80f6a498560cfa"
        },
        {
          "category": "external",
          "summary": "https://gitlab.com/libtiff/libtiff/-/commit/94affc5cf54111312f9891eb77accb93eebc28d7",
          "url": "https://gitlab.com/libtiff/libtiff/-/commit/94affc5cf54111312f9891eb77accb93eebc28d7"
        }
      ],
      "release_date": "2026-08-24T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-11T12:55:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:libtiff-main@aarch64",
            "Red Hat Hardened Images:libtiff-main@src",
            "Red Hat Hardened Images:libtiff-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:53467"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, avoid processing untrusted or maliciously crafted TIFF images with the rgb2ycbcr utility. Users should exercise caution when handling TIFF files from unknown or suspicious sources.",
          "product_ids": [
            "Red Hat Hardened Images:libtiff-main@aarch64",
            "Red Hat Hardened Images:libtiff-main@src",
            "Red Hat Hardened Images:libtiff-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:libtiff-main@aarch64",
            "Red Hat Hardened Images:libtiff-main@src",
            "Red Hat Hardened Images:libtiff-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libtiff: libtiff: Arbitrary code execution via crafted TIFF image"
    }
  ]
}