Multiple Vulnerabilities in LibTIFF Affect QT WebEngine, Texmaker, and GDAL

Recent vulnerabilities have been discovered in QT WebEngine, Texmaker, and GDAL, all stemming from the vendored LibTIFF. These vulnerabilities allow attackers to potentially crash the applications, execute arbitrary code, or obtain sensitive information through specially crafted TIFF image metadata. The issues are classified as denial of service vulnerabilities, affecting users of these applications across various systems. Affected users are advised to update their systems to mitigate the risks associated with these vulnerabilities. The vulnerabilities were disclosed on May 28, 2026, and are part of a broader security advisory from Ubuntu. Users are encouraged to apply standard system updates to ensure protection. No specific CVEs have been mentioned in the articles.

Key Points: • QT WebEngine, Texmaker, and GDAL are vulnerable due to issues in the vendored LibTIFF. • Attackers can exploit these vulnerabilities to cause denial of service or execute arbitrary code. • Users should update their systems to the latest package versions to mitigate risks.