Is CVE-2026-52490 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-52490?

CVE-2026-52490 has a CVSS v3 severity of CRITICAL (9.8).

Back

CVE-2026-52490

Description

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c