CVE-2026-52492
- Source
- https://cve.org/CVERecord?id=CVE-2026-52492
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-52492.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-52492
- Downstream
- Published
- 2026-08-24T00:00:00Z
- Modified
- 2026-08-29T08:12:56.183493Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/52xxx/CVE-2026-52492.json", "cna_assigner": "mitre" }- References
Affected packages
Git / gitlab.com/libtiff/libtiff
Affected versions
v3.*
v3.5.3
v3.5.4
v3.5.5
v3.5.7
v3.6.0
v3.6.0beta2
v3.6.1
v3.7.0
v3.7.0alpha
v3.7.0beta
v3.7.0beta2
v3.7.1
v3.7.2
v3.7.3
v3.7.4
v3.8.0
v3.8.1
v3.8.2
v4.*
v4.0.0
v4.0.0alpha
v4.0.0alpha4
v4.0.0alpha5
v4.0.0alpha6
v4.0.0beta7
v4.0.1
v4.0.10
v4.0.2
v4.0.3
v4.0.4
v4.0.4beta
v4.0.5
v4.0.6
v4.0.7
v4.0.8
v4.0.9
v4.1.0
v4.2.0
v4.3.0
v4.3.0rc1
v4.4.0
v4.4.0rc1
v4.5.0
v4.5.0rc2
v4.5.0rc3
v4.5.1
v4.5.1rc1
v4.5.1rc2
v4.5.1rc3
v4.6.0rc1
v4.7.0
v4.7.0rc1
v4.7.0rc2
v4.7.1
v4.7.1rc1
Database specific
vanir_signatures
[
{
"id": "CVE-2026-52492-00a4b124",
"target": {
"function": "JPEGDecodeRaw",
"file": "libtiff/tif_jpeg.c"
},
"deprecated": false,
"digest": {
"function_hash": "99298832847468879454843156208460195149",
"length": 3386.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-00aa9607",
"target": {
"function": "_TIFFFax3fillruns",
"file": "libtiff/tif_fax3.c"
},
"deprecated": false,
"digest": {
"function_hash": "275398218813052620544513086969621283225",
"length": 1871.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-01e9ae4c",
"target": {
"function": "checkRasterContents",
"file": "test/test_RGBAImage.c"
},
"deprecated": false,
"digest": {
"function_hash": "331549070968744749554931439027691341109",
"length": 5256.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-02184549",
"target": {
"function": "Fax3Encode1DRow",
"file": "libtiff/tif_fax3.c"
},
"deprecated": false,
"digest": {
"function_hash": "295527653160685076635635865399445310317",
"length": 713.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-0282d214",
"target": {
"function": "tiffcvt",
"file": "tools/rgb2ycbcr.c"
},
"deprecated": false,
"digest": {
"function_hash": "215326097737691744669770050999556460339",
"length": 2465.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-03205a2f",
"target": {
"file": "contrib/dbs/tiff-bi.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"118402831290100858222269294788247757048",
"218803183660088812008802478006422744105",
"305162536178640599114278913030966709258",
"126879734438205175412372668889166238329",
"61050478462223795598328079848575819270",
"115715509698125566100439952647344260736",
"4305049272487141019964530040423292761",
"48169253636733502039493659807774816944"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-048e5501",
"target": {
"function": "TIFFPrintDirectory",
"file": "libtiff/tif_print.c"
},
"deprecated": false,
"digest": {
"function_hash": "180033884397732293404832857323498446953",
"length": 13219.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-050b7442",
"target": {
"function": "test_curdircount_setting",
"file": "test/test_directory.c"
},
"deprecated": false,
"digest": {
"function_hash": "295722554256529225891587547252029778276",
"length": 1429.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-0586ea38",
"target": {
"function": "TIFFHashSetInsert",
"file": "libtiff/tif_hash_set.c"
},
"deprecated": false,
"digest": {
"function_hash": "123691133960701064619224827088758859587",
"length": 1030.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-059de0b3",
"target": {
"function": "t2p_process_ojpeg_tables",
"file": "tools/tiff2pdf.c"
},
"deprecated": false,
"digest": {
"function_hash": "139295995655147799778466233220315868682",
"length": 8767.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-07934616",
"target": {
"function": "CalcFinalIFDdatasizeReading",
"file": "libtiff/tif_dirread.c"
},
"deprecated": false,
"digest": {
"function_hash": "157863112210621525453085492955715597185",
"length": 1380.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-083c39c0",
"target": {
"function": "LZMADecode",
"file": "libtiff/tif_lzma.c"
},
"deprecated": false,
"digest": {
"function_hash": "137829088527298724821749661691675312928",
"length": 2023.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-08a7ac80",
"target": {
"file": "test/ascii_tag.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"121641067392622271907361818051089320721",
"70468001092968036424693174054486977787",
"107276623678598392128845454467802028920",
"220822368930005430193331619974068217682"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-0aa1f5d1",
"target": {
"file": "libtiff/tif_compress.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"167367578726853994901492319805390273413",
"279371669576324029571853131337768710715",
"235601881362367667667412077965556211935",
"295679474353671383245839113362032848847",
"32799633173717432237398475481004056109",
"279371669576324029571853131337768710715",
"235601881362367667667412077965556211935",
"286674388739117722530424335168601981766",
"321032464367902180145661278573948086184",
"98308976758476488419133726018524372448",
"235601881362367667667412077965556211935",
"295679474353671383245839113362032848847"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-0bb53616",
"target": {
"function": "JPEGEncode",
"file": "libtiff/tif_jpeg.c"
},
"deprecated": false,
"digest": {
"function_hash": "157612446293951178357185059760021891899",
"length": 1460.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-0c92098a",
"target": {
"file": "test/rewrite_tag.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"181635859461049960186492210822559636659",
"54013291495691501716514725736844550848",
"299588574629152876253616958937432205685",
"50634413583287020389612666980314089711",
"204628674107636704368403038716382874036",
"212462519670854885127921253484419934070",
"76889311886475803725944553861064271583",
"70003837330334412753965795283448790839",
"120298505184479594292706098152475087940",
"288061615902472954211871870768149438037",
"228970851472133478695208763685983578394",
"335055430664697663809249061276627284751",
"231673262234802191102910902262291976528",
"260624605989609482236124668056858813248",
"4542654123490266349114655592166549752",
"86352012075648439070389877426266450543",
"299933950088561670186797248165801010335",
"88889485454356905523039654471668926195",
"260177083301106663362624399602275550604",
"11827531091836335765017512059725714093",
"290749031727256710813818328945443515947",
"213735545885676858857420913291521376116"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-0cf2c3c2",
"target": {
"function": "find0span",
"file": "libtiff/tif_fax3.c"
},
"deprecated": false,
"digest": {
"function_hash": "100929042346508197882361836526233993424",
"length": 1033.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-0d0e076a",
"target": {
"function": "test_SubIFD_directrory_handling",
"file": "test/test_directory.c"
},
"deprecated": false,
"digest": {
"function_hash": "232272330222409347659886687473035236365",
"length": 4142.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-0d16ff2e",
"target": {
"function": "main",
"file": "test/test_ifd_loop_detection.c"
},
"deprecated": false,
"digest": {
"function_hash": "81807696122631484364607231477804174579",
"length": 3542.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-0d280c4a",
"target": {
"function": "extractContigSamplesShifted24bits",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "94277429206926512596860174902661229637",
"length": 2050.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-0ee5e82f",
"target": {
"function": "rotateImage",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "191908871745183467498644029227850786426",
"length": 5790.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-0ef271c4",
"target": {
"function": "Luv24fromLuv48",
"file": "libtiff/tif_luv.c"
},
"deprecated": false,
"digest": {
"function_hash": "33863134787390470881949486989330118077",
"length": 699.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-0fdc0c69",
"target": {
"function": "processG3Options",
"file": "tools/ppm2tiff.c"
},
"deprecated": false,
"digest": {
"function_hash": "260865083093299757416264547697177829272",
"length": 425.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-0ffffc35",
"target": {
"function": "PredictorEncodeTile",
"file": "libtiff/tif_predict.c"
},
"deprecated": false,
"digest": {
"function_hash": "266532290644363727182342090131593948450",
"length": 978.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-10591a07",
"target": {
"file": "test/rational_precision2double.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"36000923320133418773392263395790003965",
"337717053612112137055125198932491772941",
"239105636920776602297054455690821467625",
"338052414858283351385470709967329201293",
"133965399672306631040178447498420220992",
"309497259277597198726210051325039030812",
"262814427478817630446681999177095517667",
"255335649198187177368703757124916410200",
"96967150760530909521796054810517478982",
"309497259277597198726210051325039030812",
"262814427478817630446681999177095517667",
"255335649198187177368703757124916410200",
"96967150760530909521796054810517478982",
"86072140295276791090180985848151632800",
"228763261006250455133199471365400078798",
"141516840496050839735286349394420425276",
"1845336194818901679932393685623418145",
"76222943376538867479763210508583013336",
"297480495945928319627721275378593973528",
"98653163680012168006655144606880724309",
"122142567474636776719642432018936974687"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-11af79e2",
"target": {
"function": "PSpage",
"file": "tools/tiff2ps.c"
},
"deprecated": false,
"digest": {
"function_hash": "16519375601390818435762409801608196247",
"length": 2507.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-12b65c8c",
"target": {
"file": "tools/tiffsplit.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"152584498675109006189143764366117019143",
"193919946325945946786907988863316027746",
"265697349960821916572499811235358329958",
"140647183899851214276523480341584732716"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-131f047e",
"target": {
"function": "t2p_read_tiff_size_tile",
"file": "tools/tiff2pdf.c"
},
"deprecated": false,
"digest": {
"function_hash": "39779758014701627617508292431562359912",
"length": 1450.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-13ee697f",
"target": {
"function": "_TIFFVSetField",
"file": "libtiff/tif_dir.c"
},
"deprecated": false,
"digest": {
"function_hash": "125502268677606436684303314099461446084",
"length": 21469.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-15820052",
"target": {
"function": "processCropSelections",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "219532120394000359653825177320830297741",
"length": 5225.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-15ab6004",
"target": {
"file": "libtiff/tif_dir.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"185162619738037340468948144376502872436",
"117347615803816544258994984438633682180",
"76448861001365436563127550597664537971",
"127271797598127491327847559419476028065",
"123639246408393925917186348111013479628",
"277276790882607058131935725860515812512",
"317937839844952378096718795788753567094",
"339175558241541610957451688325021383318",
"172283770172581398648836841746264008176",
"149342969715752223819912795119406232012",
"74278321235629294394499474920493144124",
"47174557558128990449915837401229169593",
"328760089448044126561528908433486324438",
"288948899274589428619488805981625376454",
"10903194098016229922877414437846607032",
"64947436740122517918066695959877507256",
"311322923157404899376272659117537816588",
"148851873881451497489609665894169343960",
"77454260896391746343358607948270876619",
"299331546735104882805587655830642623111",
"325718336347272602233422962503801784708",
"151676818461331843404857741337554526056",
"263337318268700752916159933709178108467",
"272745549029935900162260199527159735195",
"195196730631968408490436020394321520453",
"276315129627774686710605329614114643473",
"147217546055532332740814692450831036797",
"20872939021437236645534052077454035401",
"269169973089363531955017779471747712957",
"58463762059922567311191789144527116288",
"246845716650974281451380294725913112866",
"265558103260339345894539836322566124296",
"117177608454689254072117802184083916942",
"229473655816886424303595860549310854027",
"72712504965575789313266162532301447580",
"308736754355542624634928722634964784116",
"176611949686814448235164329648541213755",
"257145491808217978735118311638293175152",
"85975104345175455557547751839854031216",
"188364880413218387628951237764290329792",
"254351571346424813566643962702114133527",
"99102076835346401470674441058297561427",
"109295433042487843658763361205651662581",
"242140532697117643232763646280742398706"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-15d97038",
"target": {
"file": "test/test_IFD_enlargement.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"308945280567227834046003989692228406203",
"30487997165513734213938007998328326208",
"281785994427152112041905763047442263876",
"184047035149374022229672909584063692683",
"144071850111157732350618654401385994058",
"174764299597433173003753494139267987199",
"138122726284266337512690624911320114040",
"332740968405053051346007542155041058352",
"284666152450431363242029879645216829949",
"279295992728246853664799964688224259364",
"4846663966080945915507297141424651461",
"67416535073704694516854673014929045844",
"27136785391985116779175104813300412038",
"286681632940297311081229418082401796329",
"95040241522953585193343044757900155457",
"243513855344600988312792939423080970228",
"333074141710635353878506192750459148821",
"2769512160776713616757355567325658405",
"329292523732160574001062151228637547289",
"262434218158788439579499560934955510553",
"46556958287395807403324015346499932860",
"190335241366507588407437978373462931654",
"113926491212338714389659928473808875412",
"317006307757807497640362091159521501935",
"334478938118964670268108714660962841420",
"189035517491893731887532540343908482739",
"110352744015159648453039903038595997676",
"32768908834668636810188457822258294228",
"248199659330390965240804509368949648119",
"83767084151271536567631170695744603224",
"38120497518586662714538855365456718601",
"25083634775364060705448925691245201466",
"194190880162413714730938417520311339323",
"45809560514139051292619723197396386055",
"139453749521638680741422258372554070813",
"47743012801362967122467420582471005763",
"263819847629515702181120442698290269399",
"311713704277816531882308934069419177146",
"170376684787220449907248872816970581191",
"134627320016898436282370222612652702495",
"163322026593601331258198393631471988807",
"323462752593812098327382009247079894600",
"276262949888222794798231312399809858441",
"25083634775364060705448925691245201466",
"6993720414547492040042030893998783718",
"206963204490851414603416795994210515190",
"267826057124406315126338597294219651560",
"8342439726499383459796277523846945523",
"4036268619430096389506098232330867505",
"112440554331467426636474402938918881225",
"72138335049378921232545260007601362019",
"100690369617337757265884018406338378661",
"35408303830373927671141771881823989309",
"53140526523966528038643861978312297929",
"72138335049378921232545260007601362019",
"100690369617337757265884018406338378661",
"35408303830373927671141771881823989309",
"53140526523966528038643861978312297929",
"72138335049378921232545260007601362019"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-15fe54bf",
"target": {
"function": "t2p_writeproc",
"file": "tools/tiff2pdf.c"
},
"deprecated": false,
"digest": {
"function_hash": "44153309728446978451394872578926228783",
"length": 284.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-1658a285",
"target": {
"function": "test_packbits",
"file": "test/rewrite_tag.c"
},
"deprecated": false,
"digest": {
"function_hash": "230218556119778563778996343123471132441",
"length": 1829.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-17cd3904",
"target": {
"function": "TWebPPreEncode",
"file": "libtiff/tif_webp.c"
},
"deprecated": false,
"digest": {
"function_hash": "185663895228463358482747699873729412099",
"length": 1188.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-18a808c6",
"target": {
"file": "tools/tiffgt.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"109167210198666602400903667893906913708",
"172698188314718076645854729550321857356",
"66715864075459602730125201296720968417",
"219482459208537292809351191297259621911",
"25828189163629432399553079504077594942",
"195986689110879137704180712735151952367",
"279572776227568019079871600713242756631",
"316490527282942421457859334138581748497",
"206722491166447440512789092505834560144",
"291495791818002701251655570057909304365",
"171257583982875963232694425445412028143",
"286766180777366828638399066869858426665",
"336805133466213406712828197939422669335",
"312621842581778001368315077067277155824",
"80868497919901256903051305966075771668",
"234311769517444053837738807047747852325",
"248267808272889899848608314698316632850",
"133538530833365154367593092576790710227",
"56927502001486909411652565009523699925",
"92317114473295026376941951922594329175",
"108287735947989430402332417759487933470",
"338828212006656031470419105827437836793",
"7689316855689289714431096856131468051",
"154906153505533976053159110692518874113",
"267927418908457455041241717255052784968",
"323777275566700209852845366740829613242",
"279685178032849698588934821768876845926",
"216808268247194095885835817596854516461",
"336586000299216321541009954039455612982",
"70060110954331334177777929513063978068",
"197204224928902134149767217788099378078",
"193949181655347856944843693963645353298",
"285768374370120757107407480963319031149",
"144637800666492153359934600480046211403",
"165285474133782298187273437828792947313",
"320016903951289257927851696506905452260",
"251303523020410757864781804930567079181",
"31403030742490765309432969931048425069",
"226397236210011907098085007730732923232",
"325287380713723973538025651338853138977",
"24786989070027367755103525752641755471",
"311465913590650931719600153649532049498",
"225000081233938251647522214893868834375",
"293070431373911329261898046149727831920",
"76725757785939998826324437553724668289"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-18e7bd7d",
"target": {
"function": "OJPEGWriteStreamDri",
"file": "libtiff/tif_ojpeg.c"
},
"deprecated": false,
"digest": {
"function_hash": "78073539390019758122565540366635548443",
"length": 567.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-190a5d21",
"target": {
"function": "t2p_write_pdf_pages",
"file": "tools/tiff2pdf.c"
},
"deprecated": false,
"digest": {
"function_hash": "285416533601996732799452288564657408641",
"length": 1153.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-1923690e",
"target": {
"function": "map_colortable",
"file": "tools/tiffmedian.c"
},
"deprecated": false,
"digest": {
"function_hash": "245005499508947682024948100418280022938",
"length": 1011.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-1a03d9ad",
"target": {
"function": "_tiffReadProc",
"file": "libtiff/tif_win32.c"
},
"deprecated": false,
"digest": {
"function_hash": "72194083564779466256470398935958379520",
"length": 437.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-1a61dd6d",
"target": {
"file": "libtiff/tif_tile.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"73278553328442928583305939798559905502",
"255237112887765218074307295250330414886",
"239649569309999142972292201941786276416",
"291528724784093011303961810296038964559"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-1ab7ecfc",
"target": {
"function": "cvt_by_strip",
"file": "tools/tiff2rgba.c"
},
"deprecated": false,
"digest": {
"function_hash": "109019720609801372902413315491228194671",
"length": 1814.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-1b656e19",
"target": {
"file": "tools/tiffcmp.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"205154310626517417718055066292239822912",
"7044757346402595327723111934713258200",
"310335056105713623043255964640648124777",
"116117869654893608211196136842986349240",
"36073368059825202629180211369739061359",
"238197888914591827137303495445177411368",
"250946443767836180197773661535677388685",
"38855693045991826678365595455620267724",
"53734379687971051598129925766347813817",
"30834467677463729926996636488813059820",
"180122114868084302079537126258175370828",
"91704628766801297903901602671059659228",
"160354639785865809328912928402969429557",
"299868779285036239718287408023322086017",
"324818358710888992415587915759809753082",
"240944242112121381032334369929095019613",
"62860560003022285743481926978159526415",
"163913109024823063973665213618650487475",
"19195093470715008057894722131379495428",
"42489165727889001446123016288166575012",
"163821037506757571341527163356807181639",
"199936443881737053739863794364929844530",
"134792771592966456779690561609829698813",
"264648942017553628859213646162561270833",
"333310760572902138672485500645364153293",
"64464298040778106076919140357867348940",
"64117740516568539243392580019600741308",
"164485564540687793022365039860194756700",
"85814772595071161920920188964973896392",
"313520254956663070047602425421057923142",
"115884160952160180904924043445914357012",
"92146193422602248625371199177204541955",
"18996701512966051853580621316529051726",
"112283012238220835059831471946159167861",
"243685029455584340959860046915142408351",
"318212599049349993491941160313072817675",
"323165883904641079477056439281372241314",
"2289672914694848420169295430651145307",
"317789915873232389731748783502690771478",
"242004658937148466345018889086892967287",
"272503416099278285642583066988737120505",
"225436979180330164763126914470494800265",
"284067110651300935601628631738367564344",
"140317572182920654825744883798303849109",
"155367992387556767122620915587033546730",
"140292447329576351553066498599303209618",
"244473338482736902565500999930618959493",
"53897064840715721047150367460019528268",
"144856998883152051895681237762461422261",
"283793777885202675724824446368887675717",
"73434598859588584863265091751286475670",
"57801776176166547519191255733714265551",
"181403040884938194073923347422753305877",
"114432101021488330065454654437220577518",
"229950898100345125792508101390438447559",
"225436979180330164763126914470494800265",
"284067110651300935601628631738367564344",
"218775796717845827524569483864584657797"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-1cb987d5",
"target": {
"function": "extractContigSamplesToBuffer",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "59420905164189374381266886239397725354",
"length": 1737.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-1cca1181",
"target": {
"function": "Fax3PutEOL",
"file": "libtiff/tif_fax3.c"
},
"deprecated": false,
"digest": {
"function_hash": "316520514791605550385598604144875582171",
"length": 594.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-1d38fb0a",
"target": {
"function": "find1span",
"file": "libtiff/tif_fax3.c"
},
"deprecated": false,
"digest": {
"function_hash": "207828637191477939780561460098063134966",
"length": 1055.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-1dd918f2",
"target": {
"function": "reverseSamplesBytes",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "336340968933878389326977241638693489273",
"length": 1080.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-1e3cb594",
"target": {
"function": "ZIPEncode",
"file": "libtiff/tif_zip.c"
},
"deprecated": false,
"digest": {
"function_hash": "285604650044842404620881954585982554612",
"length": 2471.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-1e8ef328",
"target": {
"file": "libtiff/tif_unix.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"301114533720825718978957550024821642760",
"315434079154750673935786440457745330266",
"281362516909109787201477286384943085153",
"150937352787831072298744262863534817254",
"82085411863098459651825466190460826029",
"50590679517642212242047292607671769335",
"320093718564131323300200342101549139829",
"109767391189449797455990380769729046003",
"178475675147028580682273935150870835210",
"72575471928762233144947536562355503440",
"163189874588918778550107916546374536140",
"235200577058465164073090479907450468646",
"147093041478905619900481333037600040540",
"220439276557239912580971343972245364229",
"104236376215521268123523545053009519588",
"94393832149631890657437261661764305322",
"25473909323198642207038327188761423301",
"148360329536608922957967826515000188052",
"61367612433483716744050353585048589235",
"92124737609727362723808080119072352296",
"114624884704870617424029493882585726700",
"289425307226936310063320215493928929494"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-1f68eb28",
"target": {
"function": "psScaleImage",
"file": "tools/tiff2ps.c"
},
"deprecated": false,
"digest": {
"function_hash": "88386544136859105376157295197901267114",
"length": 2276.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-1f71f9e5",
"target": {
"function": "EstimateStripByteCounts",
"file": "libtiff/tif_dirread.c"
},
"deprecated": false,
"digest": {
"function_hash": "264653781519684912221942342764167792730",
"length": 2881.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-212261c4",
"target": {
"file": "test/test_arrays.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"309768126699275454777087576401529789404",
"13349181731354669300013551210263324285",
"218465179668203999170023273390626272220",
"204762825916439773045595276008266201185",
"49701236118272950292984375194949817526",
"172594226966956493046022529331633369438",
"248272691010863113808330405689875484509",
"27248204021154401051317769589232248800",
"63129161189020538385453443139905789870",
"223925000680090345721263816120624797639",
"106219851740857381837957772506179396325",
"255131602437874678465942471267610430218",
"35085371275987651106003098785202384298",
"38530208958465726794084267902407305937",
"323694807744011303631489808791228021026",
"261690688367604921671093014229711614370",
"319882438214934572669641829266484122986",
"307158558220294010546557187458740682820",
"188656696077401663963120626795069211236",
"234941640085531664392460815093544127227",
"261435476824891257276962359216903438992",
"191872125137951760588307288214617112776",
"236516491012941563728483768079136631992",
"177634117875371149408658559816181688353",
"158526965520596782037442600980625366038",
"308578480215905985174988487547458752937",
"248163885850742817819883737958556867679",
"30812784174583161160268855490216794312",
"113385205900206574229112023716454934422",
"128665480143919470804001589989893039460",
"85719890975670751119305700436687283110",
"79253639940941272065571678729392419805",
"179890012359436375266967087953733170032",
"86513150562839827533934817146110010203",
"2122036210830832210018979947450384859",
"289469273995350518184772901446568420344",
"204986210438193629663619598109089488191",
"168291318812139890035883222143978823026",
"113724848747355190186458647144455621247",
"223600886028300578855548701180729644744",
"221753811376975581439386443746330312179",
"55349221368198128309596895708168908303",
"262739639968709975467963225982262158808",
"168057421051570607174497935540431194077",
"214557001172772910641432636148293106197",
"159339003800198048987083871488184044863",
"73809535606450808199714390566657901240",
"130069867067416329167636754668077218025",
"76186281117249951434459955534056852685",
"10545091409832725569394383397419452404",
"106426621235818870924746092302863219598",
"167267947427895699441157847849072749188",
"310201846784598626287016283507516123051",
"134142190940839457220442130640842237005",
"76326154018154426215129923432123053120",
"158391109429999106883394630957523670006",
"243743714990272605945165204289858608078",
"84608644303148409916310178464118923997",
"215968701665711751610807109353195549024",
"95848591070063972617407920056676408696",
"152118376628611277089215393323253585215",
"127974374296447546965832006436721215065",
"263406668503581368332964484022401413201",
"28388118291927571605186913106963775866",
"90649481942057317921633959871047189862",
"205991050626023434332480607610831951900",
"253161117990036869792593974268339570770",
"194168923867432673039885433360649698278",
"15839668146867012321730058012673339217",
"132307241044113457117877905523292584576",
"29890616757191487165050946895829923532",
"264093387623783328031118911498714370676",
"68126482841637133479498330772632841094",
"36662821644368090130182744345437759027",
"128396751095001754046462504443735121025",
"162017179556481463945871547642250207680",
"177702762045727184084344863208527416332",
"191482823019716329222107949307324108202",
"21497898933605734144329014062041206577",
"335245288063418430920742433982628178867",
"286450474908327625223486525512741005065",
"176699835779340805918554828150769376360",
"299760339583549942789612115858872815308",
"5180694318416456873448864664410634431",
"335088330923550315877756309054545547543",
"98068723408268132925074310489784098313",
"187587288064265635830076716930082637938",
"283511204245392782764475646087989023886",
"320161777504472138333757275515846240324",
"168388272019862903135162519469011874298",
"20370702022213019890822958062129648623",
"290869292401722257200734848413896857401",
"142453184878542832052088018263067567807",
"285715687466270103092458634805775740544",
"162218407419449782978362082603927363402",
"329858670400950649258044461538101497373",
"103259484377464485074973601111464035823",
"239323097637221913745991773938587996458",
"238981612819870873241147106770903021259",
"97025385343913757680908709838518937669",
"234149602166166553657262264822761817358",
"126038718991602213886345651730383853307",
"101076419912973400014313920633489064398",
"235728204810119963546370157926122565029",
"135129531683596630869120148175793774836",
"291556713743147596374508673028085514829",
"232471475469680422751600711491221549924",
"51120878002204270172025379357329068642",
"235899879095587742527213362333254988080",
"218341105476690082455608966412439564231",
"147091999675246933328618809639853237342",
"250802215688291954561819884867464780903",
"244485203304327629668595539059735197006",
"259256999716106739407202403124521474723",
"270406057628442213283006737707637086424",
"55093803281639055991046359521660311174",
"124942315447962450711452569681809337479",
"76400236885210303196888527523450639930",
"220780871925126486317339091681733662768",
"300888520630631905950804659819362896380",
"53260574230469005171936981863359890200",
"112017768870317955764959568373234286444",
"137197280892005840088659182666809000891",
"80934458637988440612982046252972766945",
"292633535382596448421623883373742680653",
"85411589795783348866442306663645112801",
"265382095288107488741884978552892935352",
"48777690891162894380433509421924107121",
"31188208522746527988344692012200764678",
"136796362161399703576411743385491109212",
"255162729743135602246983778058176768155",
"160444735976046034388230784879704492939",
"147050955176478395523382470301861855357",
"55444850866264797865794917968721997238",
"237099941965933994923871653634387460897",
"269023999652937462074327094045548529159",
"29857674901555537042642041556438501863",
"253036912946376977229541731741762702233",
"219618206235779797865439149964637282797",
"79357600709981522904388944365753270864",
"229810590074293476723110617469129782407",
"288583094597942177724509601979023743802",
"312470084539029487236397263836123228827",
"95463158690064049355029519403924741182",
"310723911224520062404406838836096165124",
"273277583809895844972542511859629271815",
"167640524897195033147420767450722717745",
"22926156363923284698982164488164568430",
"135046416045417073224579225053316741560",
"250764174410404964274621847905062491672",
"193636268044006486983615980924548609367",
"181023683826022118934733615492558139254",
"239217224844030144265379656800546173080",
"24338647265405102523339934842040821958",
"51222607551263593194081461367343139931",
"321173725999114970829764421200973174206",
"333712759301610172924009278439872685465",
"179599597099729795769732027739226382649",
"191244004755230742158113694848571695005",
"329368941823914186211055951440976029529",
"270595721244522101396288221818793221513",
"25492441515511729989572742799154262555",
"30235561787021770095957721241116742578",
"75625515867137560676070005896879998599",
"100062661251340086154595866468171250226",
"124947672187093082236937651125757731531",
"249685243728457578268793631694518136332",
"275501422951957478151907902998154948598",
"68510237784475798249994697374430608297",
"261794771104212092664876142011009266851",
"287785745164469979482791470110407752113",
"196620567281235564190477416998013872345",
"121178724130648140024343296736278947133",
"312686206703385221360442594217299104240",
"97420128690928402585749025692597897642",
"218025238748160865156848028218472214442",
"250144774550312212123072243193109367439",
"222386748519894683697528095073518137795",
"154098225657984917516116067116268813548",
"79209232186509591969833469703248675468",
"119914841803353272244208367224635277788",
"17379197232609106556073773210051833735",
"265698859201416047739227959661954398624",
"169343744505444840788085608558992918352",
"297632756080821559086515138732300073645",
"330624414473841750064486447707214582464",
"201072884451864006360740237232354847574",
"284719806944496964312474789774813340537",
"96476657965249890138590790927213750340",
"160613195809247521398235811165827586148",
"39880620403036832802518438217118237000",
"335870830454036478797437363383377819245",
"97246174041070652044174081076088792253",
"53463996350582707094163975113844320292",
"62837629068392688240612017526015211381",
"130452175340482940942026939881387250687",
"30856587471151695364402411052001090568",
"220061548355306970503048361203374939177",
"4443318494859482483862746643099768116",
"158332496437991252369244414113322304023",
"19234124901285069500483161862821296745",
"196268326370218770993807363489422863275",
"226002150369430716929745913919152835853",
"113990839518136225427807782438928505056",
"173415760896529968872670564827652349959",
"251329961903804446062106378124767180399",
"250156910089261537877724354329243160582",
"237807399300386990378686159128323004461",
"248876191977158854732147148520996437475",
"135553741222220218694385388249141125919",
"227276731956815864809568752819332822162",
"248024974445325384021753419192267046326",
"242178002022830769924938416895929421916",
"137742244410354811233668878899783086236",
"223196976993554643096325532351437216661",
"338383635225760196057302437358695639814",
"40284206385037079200066494674520001122",
"256265107477479794299741271007826702833",
"139313653611534413543605934256019846402"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-21ff89a0",
"target": {
"function": "TIFFRGBAImageBegin",
"file": "libtiff/tif_getimage.c"
},
"deprecated": false,
"digest": {
"function_hash": "47542195247389609285192346903031025549",
"length": 6197.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-23a3c27a",
"target": {
"file": "libtiff/tif_thunder.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"291419794494717566350799072687365804158",
"125870118438691815017256405814523066977",
"19989137876978371700299989990614363209",
"225315547552807407629581581915124287114",
"196914014019736186805401548101740251185",
"98433039724693719962616946776973585189",
"196698456700506386525771244769632580802",
"42350862064171962583538908765978366212"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-2454fca3",
"target": {
"function": "extractContigSamples16bits",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "73101606607360083520277515687974159061",
"length": 1718.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-254d1025",
"target": {
"function": "Fax4Decode",
"file": "libtiff/tif_fax3.c"
},
"deprecated": false,
"digest": {
"function_hash": "234002277891050584660156499939601816242",
"length": 1704.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-261e80ab",
"target": {
"function": "extractContigSamplesToTileBuffer",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "248491739381356111549669764821886574080",
"length": 1769.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-2636fcbd",
"target": {
"function": "extractImageSection",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "221048584072390693161231619488869886489",
"length": 5859.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-26de6c8b",
"target": {
"function": "extractCompositeRegions",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "49241487599397236355587954318559542031",
"length": 5775.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-2aaea3e4",
"target": {
"function": "main",
"file": "tools/tiff2bw.c"
},
"deprecated": false,
"digest": {
"function_hash": "174051129447201008360045453593199391568",
"length": 5380.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-2af89121",
"target": {
"function": "super_fgets",
"file": "contrib/iptcutil/iptcutil.c"
},
"deprecated": false,
"digest": {
"function_hash": "209128099506415438734966052269531873046",
"length": 733.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-2c9e0f87",
"target": {
"function": "extractSeparateRegion",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "315622170901068943499425786040911210242",
"length": 2271.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-2ccf7e64",
"target": {
"function": "main",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "286015479109400497461794555306881602522",
"length": 6361.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-2d774a8d",
"target": {
"function": "TWebPEncode",
"file": "libtiff/tif_webp.c"
},
"deprecated": false,
"digest": {
"function_hash": "213454543246980493833860360755803499524",
"length": 545.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-2d7d5085",
"target": {
"function": "PixarLogEncode",
"file": "libtiff/tif_pixarlog.c"
},
"deprecated": false,
"digest": {
"function_hash": "261764703475986201256051875349196922466",
"length": 2440.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-2e164a43",
"target": {
"file": "test/defer_strile_loading.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"297242721493732743516985929932557457929",
"8302362266898431299116475537089463968",
"124722627528629609579183396569130337700",
"316218612524164508867507144046903593727",
"295057000485890147058153758954129269586",
"318323593374361484298990219972927978279",
"208279310901747725464487639183490869657",
"29368339393698088357804184165036253907",
"334251847213745654581045401663732035954",
"47477953377873346934394202032309953140",
"88876976765650712129825010279578345160",
"145335896149638998935593945316579917384",
"7238279704248540374434725660091841765",
"165759644553791250252382680221322654339",
"203038118568040161662757268161456445915",
"258161692212810817522391766624165781674",
"163363108658663473800671518824418609012",
"50395322940849094051215417561972099747",
"306229704781756526771243135104952130829",
"19227558653634181189869352286200100264",
"109884452437423730449850328408978109951",
"309897967759699639342671355134572792843",
"103959267630756359444519214902131958884",
"125382912259894902805767040798347172946",
"242943957363847534028116449562699604788",
"190242509150262132613686688903599497334",
"88483872820382474831209086515308581153",
"209259105835111399327428790702096609575",
"333074141710635353878506192750459148821",
"247007001899207287708933510361077844986",
"244885353736538854235891400870564539985",
"72355499837792918309283398714595014096",
"243646220948511242023276396205293406095",
"229622488058555318112993383211638123862",
"32809518628062079115429036576767359544",
"293355172227193585467677013323166940465",
"112380841034407193902107932232123992674",
"157819491150918378557487676770162275363",
"337945836965016391211289652849773324860",
"142768670883436033191104729008812588871",
"324007915134676058263517094022717693767",
"299003325638029263290846269738778944665",
"339059670845951405976703828306955992786",
"115182636644572051922836936987065779042",
"11501846678207126682285959097453792726",
"56396157388198800607642048891142094379",
"336830539140672336481660478404063181929",
"94703183633263761358346482489618793786",
"195500153571668141046526758602608035730",
"151593177758089528999532540505113650212",
"143119866754868025528095161452566956732",
"312242566963151472653558367731861784516",
"166169676509763230211414074064584719258",
"233078227272253963592604935707736776956",
"179033582010654327966345970195078175586",
"280559539674873068998033209767519470686",
"288326849563028998460868459585412870367",
"200321686345884233303134979979900099848",
"209312540938841169085125299382725752084",
"215068468519744363009563671851786314642",
"56396157388198800607642048891142094379",
"336830539140672336481660478404063181929",
"152809038376857165245356625716922609060",
"46737353019786790957376486409699537221",
"297378341391964520214408899990925989668",
"134108643117000302562357150961017476999",
"29750259894078560252453870745110129957",
"314417684396342352349491771845097024033",
"180676435192329412727291721981634508305",
"94683759402772566147200530537070158191",
"261645570322453906456137237631824309846",
"17626508964129288194176644453946330738",
"238437276878244614732250296135080328878",
"235919653308459590627103289457070697111",
"207372829141117268749821814740303418109",
"101567807462569144219489904344920390735",
"971263215820511805907522767693597864",
"239441364083383816719110106602475642022",
"53862194728354043467792029578358713711",
"149649268860756379763773231372996805385",
"25815895967012844747321331791181537722",
"16462450639958192139489455987960110752"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-2e1973d1",
"target": {
"function": "PixarLogDecode",
"file": "libtiff/tif_pixarlog.c"
},
"deprecated": false,
"digest": {
"function_hash": "260765663280044372644518833734898871758",
"length": 3911.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-2e3a27d9",
"target": {
"function": "TIFFGetOvrBlock_Subsampled",
"file": "contrib/addtiffo/tif_ovrcache.c"
},
"deprecated": false,
"digest": {
"function_hash": "91991268176660323541963860838986230753",
"length": 579.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-2efb6d6d",
"target": {
"file": "contrib/dbs/tiff-grayscale.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"334871472168736087329044372201620949381",
"68009696225001424768175730839792264300",
"325685733289327299085789916517444777121",
"70817304952122538914680790357570124607",
"55053017583798001473775070013110357694",
"19942766628808730780456115558469361378",
"152753859297309289770046761825761573189",
"312596435204483507223639086462561163248",
"163940551648249431698518789379546624031",
"199303543237240210587249074049726143056",
"88164301693851892258580557113409701923",
"337248845651764630347791252401114019893"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-2f244341",
"target": {
"function": "main",
"file": "test/ascii_tag.c"
},
"deprecated": false,
"digest": {
"function_hash": "2036200967403029985543165702958526827",
"length": 2442.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-3024f1ae",
"target": {
"file": "libtiff/tif_zip.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"285822634497760775541025686172850755972",
"316280764231356036013169483373101021487",
"246462295602730242865489510326043351301",
"206379628981938611653052347468048233753",
"163322371671878056247119794411802551588",
"12340955088844499723808089516262179542",
"11565318317264061123814234195258265235",
"196510499727667905760216364247616068224",
"326066071323715875527253271849059014667",
"22134116084578726823072200497658461619",
"74661838411151435112253785628576693324",
"262370356294919928835238362523424737186",
"220115628939777719466317211164426982728",
"323058747128528054246257448468405675357",
"64603063907817284427735943036643465177",
"289070257627128438884807713486176082177",
"61318927355399393723300740555988572469",
"75300861633777308236758876790381235750",
"225769044699115013490231672623958897579",
"224326982126996992665106879638599578005",
"264735988764099424597960852833113020991"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-305dd985",
"target": {
"function": "cvtClump",
"file": "tools/rgb2ycbcr.c"
},
"deprecated": false,
"digest": {
"function_hash": "332930297670464963274054950191231810849",
"length": 1036.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-3181fb60",
"target": {
"function": "TIFF_DownSample",
"file": "contrib/addtiffo/tif_overview.c"
},
"deprecated": false,
"digest": {
"function_hash": "494349245939925504098271722005200826",
"length": 1795.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-321062dd",
"target": {
"file": "libtiff/tif_zstd.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"199675140246628324853370606731116651908",
"34058299921174851764828454607145175105",
"130433233141090668408777098564158398179",
"177719648682691036812057385799144255832",
"169034000028083421401737529975866873042",
"278275932097784158129636984130950273778",
"120642900953614460365665176492526752336",
"234972952460482071470124767144913117190"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-3332ffbd",
"target": {
"function": "clamp",
"file": "tools/thumbnail.c"
},
"deprecated": false,
"digest": {
"function_hash": "254736259442836336654742276781616139589",
"length": 146.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-342bd873",
"target": {
"function": "makebwmap",
"file": "libtiff/tif_getimage.c"
},
"deprecated": false,
"digest": {
"function_hash": "259391039518798148541174764190428390351",
"length": 1186.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-343970ac",
"target": {
"function": "main",
"file": "tools/tiffset.c"
},
"deprecated": false,
"digest": {
"function_hash": "67022864996368506093689847040396932407",
"length": 7920.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-344c3912",
"target": {
"file": "test/strip_rw.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"106704984479658564235733306296925897188",
"125826370857884305056678107615434015445",
"61484590206986823789047287859971045118",
"257295717074294796942727077109087064516",
"171471556789197174635566948486907925838",
"125826370857884305056678107615434015445",
"139289854797175468110019316783967279070",
"89974999787664816823003636901177842694",
"211253218922683269846038789333071860873",
"125826370857884305056678107615434015445",
"61484590206986823789047287859971045118",
"257295717074294796942727077109087064516",
"290705606914317031634996615674455763266",
"125826370857884305056678107615434015445",
"139289854797175468110019316783967279070",
"89974999787664816823003636901177842694",
"235917059691549677017772507762692106092",
"245532207113986410435815894665238660551",
"139763189485023321682901628394641362518",
"106629418884131074460139625371852536634",
"48224164286699218872760129612266432893",
"296214580882827030282192431725445922185",
"302908080123318818095681282931667921107",
"608669767229331271895396524477526282",
"131444046635071856569931040314295310612",
"113879019730159091258654625384470093914",
"81648677105635180787596941546488915287",
"80617238327589790298575711791431345343",
"245532207113986410435815894665238660551",
"139763189485023321682901628394641362518",
"106629418884131074460139625371852536634",
"48224164286699218872760129612266432893",
"296214580882827030282192431725445922185",
"302908080123318818095681282931667921107",
"608669767229331271895396524477526282",
"131444046635071856569931040314295310612",
"113879019730159091258654625384470093914",
"81648677105635180787596941546488915287"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-35724f19",
"target": {
"function": "mirrorImage",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "180239703595252886824080503990722092054",
"length": 2411.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-358a2b7a",
"target": {
"function": "cvt_whole_image",
"file": "tools/tiff2rgba.c"
},
"deprecated": false,
"digest": {
"function_hash": "64345278282909653177655859834717231561",
"length": 2273.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-374a2971",
"target": {
"function": "TIFFHashSetFindPtr",
"file": "libtiff/tif_hash_set.c"
},
"deprecated": false,
"digest": {
"function_hash": "784231529315655130356055685009008672",
"length": 326.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-382e8511",
"target": {
"function": "DECLAREContigPutFunc",
"file": "libtiff/tif_getimage.c"
},
"deprecated": false,
"digest": {
"function_hash": "131266472239437628368790412822427853968",
"length": 562.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-3ada8f29",
"target": {
"function": "test_current_dirnum_incrementing",
"file": "test/test_directory.c"
},
"deprecated": false,
"digest": {
"function_hash": "274898961018148359114985181116692892608",
"length": 9760.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-3bb07af1",
"target": {
"file": "test/raw_decode.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"11529484062803152983154864469968310298",
"20572675288612833464854978722782374106",
"52943260009804043455107210661558564562",
"210693777416803269391621230729549543928",
"11529484062803152983154864469968310298",
"20572675288612833464854978722782374106",
"52943260009804043455107210661558564562",
"210693777416803269391621230729549543928",
"284899251874432235043248012658305336431",
"42048269551738448914964404692961169784",
"112965686725779363193271090986400184098",
"43609433748837114190454952929933624293",
"155561889482189171027289425643424002408",
"243782769800457711292723968166965864978",
"287078551974423704842120215647447344398",
"148934129446546604976271994729162103528",
"201607858327864570891066658230726365126",
"196917722466047833400383425708214879387",
"281272296746271729657234765986624763821",
"217943770188033802335134088010373741637",
"227773940639082068565027721497268308925",
"313257832942577611906725405539299000038",
"97571654440227568765271390763514883945",
"198398683053089646826696713718997143467",
"259737905421536766152260525351028581316",
"325538136362365500847708786096611449893"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-3bd9711f",
"target": {
"function": "LogLuv24fromXYZ",
"file": "libtiff/tif_luv.c"
},
"deprecated": false,
"digest": {
"function_hash": "156095502750030347222909057994215513695",
"length": 463.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-3c0ee7d5",
"target": {
"function": "OJPEGReadHeaderInfoSecStreamDht",
"file": "libtiff/tif_ojpeg.c"
},
"deprecated": false,
"digest": {
"function_hash": "103863193683690960983845300337894426020",
"length": 1662.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-3c77ee3b",
"target": {
"function": "OJPEGWriteHeaderInfo",
"file": "libtiff/tif_ojpeg.c"
},
"deprecated": false,
"digest": {
"function_hash": "148346336414667730651045461946630899408",
"length": 6332.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-3d6b452d",
"target": {
"function": "TIFFWriteOvrRow",
"file": "contrib/addtiffo/tif_ovrcache.c"
},
"deprecated": false,
"digest": {
"function_hash": "63724613900153581181625828310370829848",
"length": 3771.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-3e47afa0",
"target": {
"function": "TWebPVSetField",
"file": "libtiff/tif_webp.c"
},
"deprecated": false,
"digest": {
"function_hash": "160208973071374255703749860615344987730",
"length": 1126.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-3ed8501b",
"target": {
"function": "rotateContigSamples16bits",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "104472800466236945016858427746024783453",
"length": 1466.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-400709b8",
"target": {
"function": "TIFFSeek",
"file": "libtiff/tif_read.c"
},
"deprecated": false,
"digest": {
"function_hash": "156080810779986925589445795213854460109",
"length": 2051.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-40ea32b0",
"target": {
"function": "writeBufferToSeparateTiles",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "238635394399485007363142311048200018036",
"length": 1880.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-437fcaad",
"target": {
"function": "readSeparateStripsIntoBuffer",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "125735062591362711386195672383660784284",
"length": 4038.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-43abe92a",
"target": {
"function": "TIFFFetchDirectory",
"file": "libtiff/tif_dirread.c"
},
"deprecated": false,
"digest": {
"function_hash": "272282449774830596039154372181902901760",
"length": 6093.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-43dfe9e1",
"target": {
"function": "combineSeparateTileSamples16bits",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "231247682069506427072899250517484508237",
"length": 2647.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-44a83545",
"target": {
"function": "JPEGFixupTagsSubsamplingReadWord",
"file": "libtiff/tif_jpeg.c"
},
"deprecated": false,
"digest": {
"function_hash": "235992639635847163547704702795565188362",
"length": 231.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-450aecd3",
"target": {
"function": "main",
"file": "tools/tiff2rgba.c"
},
"deprecated": false,
"digest": {
"function_hash": "316195341244863755460771641165245907911",
"length": 1902.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-45df4822",
"target": {
"function": "main",
"file": "tools/tiffsplit.c"
},
"deprecated": false,
"digest": {
"function_hash": "157727612339576168680004692007747469526",
"length": 2411.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-4659b2ea",
"target": {
"function": "setupMap",
"file": "libtiff/tif_getimage.c"
},
"deprecated": false,
"digest": {
"function_hash": "138527430772565057549499370455999554535",
"length": 953.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-466d876e",
"target": {
"function": "combineSeparateTileSamples24bits",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "20333511730056969110611237980041309583",
"length": 3236.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-471fc01a",
"target": {
"file": "test/defer_strile_writing.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"125382912259894902805767040798347172946",
"242943957363847534028116449562699604788",
"190242509150262132613686688903599497334",
"88483872820382474831209086515308581153",
"32809518628062079115429036576767359544",
"293355172227193585467677013323166940465",
"112380841034407193902107932232123992674",
"157819491150918378557487676770162275363",
"249424401450481014206076652569772962556",
"133789934624368344951837855033057338927",
"324007915134676058263517094022717693767",
"299003325638029263290846269738778944665",
"337665921161919490521780384432350042394",
"300501960887874178714662430347124659886",
"102339323377623724511632915221131241100",
"288326849563028998460868459585412870367"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-47519210",
"target": {
"function": "_TIFFRewriteField",
"file": "libtiff/tif_dirwrite.c"
},
"deprecated": false,
"digest": {
"function_hash": "322552918817780041475771106791205020787",
"length": 8581.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-48a9304e",
"target": {
"file": "libtiff/tif_luv.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"233885691379923126450970229536168756611",
"265392852955441280534906524911077923440",
"244948710276740631209523565065187337094",
"294126963607158142318481582666032938062",
"98069855000499448698551807794340736509",
"180330639630891071709690033031573507316",
"142923933743432583581611365555465667508",
"147773170374220410443970533664368528669",
"107369749591098705205927501068374148465",
"207313467174673155795702982701665025576",
"244948710276740631209523565065187337094",
"299463489796364950343624367188301634261",
"103151496999832091206903707706365772716",
"292328839403191625808595897990789025898",
"153377568919543508291851882255607751510",
"119026569034243126311626937349712548295",
"20061846022882390747389161201943612731",
"213769007856423580894453702550104545808",
"238625874001282995427129264268015427210",
"215593807419288190930801816596735964981",
"167038624641935338510894070915231205610",
"298977430180870552070429541877125708217",
"255409755218643376078563770744815150976",
"323014351926164234013155002177828507799",
"281499322636097645259354648592323157801",
"302501590423204066615824653107138558795",
"18038492965675825899363586869674676128",
"31228975999580491357453733779238366795",
"308573953767247319976963914022650578827",
"72558100215531733253005374675680868516",
"134986682713024532505509169764965199648",
"111185225159526435693944992769213342537",
"93150405145164434419122835958179229780",
"32817597673777370266305449138149982333",
"101716124217217631365717337694405948258",
"118420353472290174087329287585251816687",
"305924263162247731582573175314952242656",
"14608480673092981311594309678287292091",
"218305128245194854210656429701540602911",
"191656690843045701514501270248511044523",
"129182888091151486270159064447826030530",
"141780612373829562406970482474948590874",
"239195596809675287730898213910116525177",
"149631261512919900589335443609093253050",
"164597701289168703331731876398111352369",
"164305728085001587874422236566546965455",
"180222790273997597056027707636999933985"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-4914aef7",
"target": {
"file": "libtiff/tif_read.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"97804032545464843123225178604936106280",
"10316560473397022245138085125724303318",
"251516853609228235460892421264160642458",
"267098128656516288343813074865943305188",
"40555263052073374382616277436072726769",
"246252047200820472229205130234567340184",
"187086890605361100817944768080767186396",
"6430818704903878577306785174624998940",
"243578956650416437337629326242119927628",
"117711391862212617030790781830567666052",
"210180540274812390684586987103980094889",
"224946797095738557560582601392363226284",
"56320562144564622263536867690859491060",
"241299643587560638718732022172797289112",
"230625153201327748270975463371107164387",
"122811523953532132368496468420254934346",
"7309172950853410261967002679259615520",
"316063642179135842568054171627047189178",
"55957833845659068421151308901551210471",
"140243877174440871704190104978236084295",
"286898079860213560893005085035785917694",
"87764665819038123214717740833976086616",
"166466248075739667039130542947806772607",
"271952831335750880272712067501087804204",
"43956144074074937292188997405579979839",
"75562674232836607696226141192836365074",
"141208921800241937991294900570519514126",
"286037845730461394827217573231770384436",
"54692423219704882763360475448253665568",
"68057003691637734851701044652674572590",
"73203320799356601287418935953358576858",
"137910796800652126517956548844748528135",
"169740986028547937033237818957187773990",
"25158740843909683292341571712370028610",
"133076030303422546561792323805703359107",
"192114705534276745228247502643997292926",
"313752962024590904315906934666512601673",
"147159072300365322398654829234595515885",
"207546257583836234470017307781567768828",
"23398665400018182505501394059563117689",
"66886064235789158021049231443978624391",
"141104633478010967263370308378404591715",
"337601239834466380595659929414788709810",
"94359471710597772029039597350224774798",
"127277668410840500258627475213048631502",
"67582601908579878104919602983865305416",
"288385928719186479610608828581042228581",
"258609042013147721515338792606723303248",
"325117104160236585817627924292550097798",
"210261242749724234798431869737355011377",
"113907050756516602419704632207288820501"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-4adcc44f",
"target": {
"function": "reverseSamples24bits",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "64339586881547713332464953867670513976",
"length": 1397.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-4e5eea3c",
"target": {
"function": "Ascii85Flush",
"file": "tools/tiff2ps.c"
},
"deprecated": false,
"digest": {
"function_hash": "220534716949960683892377400518200848019",
"length": 271.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-4f650dbb",
"target": {
"function": "dump_buffer",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "303499901361399058543655146819224872116",
"length": 683.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-50aacbbf",
"target": {
"function": "ReadDirectory",
"file": "tools/tiffdump.c"
},
"deprecated": false,
"digest": {
"function_hash": "88682379043185773052593154155995089686",
"length": 4557.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-5148b097",
"target": {
"file": "test/custom_dir_EXIF_231.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"129387634568235344939613922793276214449",
"168823442668962042648748003283093636422",
"294765801366155614724737141386319097160",
"17234558072458585215475128070610458218",
"118733319503499101677952291748484600201",
"306021109629584668691973635472470675112",
"227459407237196611538391354945892376975",
"278683697342830355482565407048908344761",
"55296864502491118902996180297696203177",
"135098150652350281077712207164059313046",
"171792922971210155811675425452525977419",
"176127351233339065378955396074540828533",
"167867424286041041171399458939205507968",
"190197499465809477711178943416696344067",
"28218929431920466145719591957356002273",
"134824909416875502444127724249644020720",
"92868871092301958919546148098421789506",
"89250470157200209850189215978855009242",
"250279579653128601444936957662899058480",
"194285368008026405351071438305634752566",
"255412669413845987286778336829154066438",
"305532454575428645281420076243555784315",
"75968417715524101134968011480449426503",
"246957356479792401158604974159617957313",
"86072140295276791090180985848151632800",
"217222847760353013325986045973408348947",
"146185265185313242396450028256308432774",
"285375259665474369930482758055301376289",
"76222943376538867479763210508583013336",
"322182839147331013897013276347400625593",
"292995684032984292039449642627090713963",
"338658295022277161118865614540691015344",
"129187357840866037484924695495686133776",
"257641475049739351287964436029047002888",
"102971950753481196486936781352465587326",
"119906988536658910871461643473022363134",
"266847426931083703507236565301466521393",
"198427578301294138673061680160033669413",
"216946154654109359178047790349700620740",
"169260150430855082173377645987379333176",
"289893213224094076643880369799032780497",
"219757291653343999559597015508372309415",
"30420058620816686935108577342932451411",
"229700655782769674981485733267589701056"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-52ce0e45",
"target": {
"function": "TIFFYCbCrtoRGB",
"file": "libtiff/tif_color.c"
},
"deprecated": false,
"digest": {
"function_hash": "39403620930613016722420187015526287883",
"length": 614.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-53061c21",
"target": {
"function": "PS_Lvl2page",
"file": "tools/tiff2ps.c"
},
"deprecated": false,
"digest": {
"function_hash": "179826720887769834380834285722974508139",
"length": 3714.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-5402b016",
"target": {
"function": "DECLAREContigPutFunc",
"file": "libtiff/tif_getimage.c"
},
"deprecated": false,
"digest": {
"function_hash": "279220358409499254271755195983287862223",
"length": 457.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-54d88a68",
"target": {
"function": "TIFFCreateOvrCache",
"file": "contrib/addtiffo/tif_ovrcache.c"
},
"deprecated": false,
"digest": {
"function_hash": "339083479298836810304445146977181592724",
"length": 2249.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-55378895",
"target": {
"function": "main",
"file": "tools/tiff2ps.c"
},
"deprecated": false,
"digest": {
"function_hash": "126986413277778086739391727217149900042",
"length": 5241.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-5582466e",
"target": {
"function": "uv_encode",
"file": "libtiff/tif_luv.c"
},
"deprecated": false,
"digest": {
"function_hash": "278210826393904660050171575363112053810",
"length": 632.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-55ed326e",
"target": {
"function": "main",
"file": "contrib/dbs/tiff-grayscale.c"
},
"deprecated": false,
"digest": {
"function_hash": "223882478219296124256576001078297265752",
"length": 2143.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-56bb69a6",
"target": {
"function": "setImage1",
"file": "tools/thumbnail.c"
},
"deprecated": false,
"digest": {
"function_hash": "41984385448156456318090932266434628241",
"length": 601.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-57934c2a",
"target": {
"file": "libtiff/tif_win32.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"316415500016647627227843238224838930087",
"316498069086293280500337348886831507755",
"69728494881327798325363649541253949347",
"272013586873138275678215682988355407550",
"316415500016647627227843238224838930087",
"316498069086293280500337348886831507755",
"69728494881327798325363649541253949347",
"272013586873138275678215682988355407550",
"204405990704997788752327313412737239827",
"50320019435892174298346855129857844607",
"201253284732389671487159318072160246841",
"212708317995290947218684447849441658420",
"23813425667809966468057468888312111393",
"237734934447201046198757801559459378670",
"38550441297357157640719650430756735786",
"115172167489134201513395029137788204003",
"286532400204123834736539760080715211627",
"18927022502462052030734571177801281899",
"277270368014075495393192064266845242531",
"35020142739558100922431766794978481877",
"96727948312248791477335799610335523327",
"178220036268560891236077734096426389142",
"62429559582725944584970952046647525932",
"304489875097706699644399607710093428142"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-57cd7cf5",
"target": {
"function": "OJPEGWriteStreamAcTable",
"file": "libtiff/tif_ojpeg.c"
},
"deprecated": false,
"digest": {
"function_hash": "177905684317305692513013238949564470902",
"length": 380.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-582889e1",
"target": {
"function": "rotateContigSamples32bits",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "199494030727863863384331836347996420392",
"length": 1884.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-58cca69e",
"target": {
"function": "gtTileContig",
"file": "libtiff/tif_getimage.c"
},
"deprecated": false,
"digest": {
"function_hash": "14860090016098085151486971794704713723",
"length": 2967.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-5aa89f2c",
"target": {
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"185662324905883010164731759887318249559",
"33060534045929305528231485962942364172",
"87357137621088347604867977964551735934",
"191940150498915382818422184617817261175",
"187691596944952936851464382481777178054",
"241869064994775922401770012343884111702",
"20710351730002325339508123779216003274",
"175668668429948647903021642513190204549",
"44174934414318073371262600747898688938",
"24835823750008700592057476164522444160",
"279080340169230487676466642177245339337",
"267815766673412057283354774462074122513",
"22873901452902630776325474759783771226",
"151486138972668490189911872770552969169",
"146172201414772599555204436368643700323",
"267815766673412057283354774462074122513",
"110831878723897439141715754260687724072",
"84426999959554256631560108879284354883",
"131448468210187024882766934841356709808",
"267815766673412057283354774462074122513",
"115904210181279988667331355769658336183",
"197139719500170450738295453727994594244",
"136421052742989702449593753987985444940",
"267815766673412057283354774462074122513",
"115904210181279988667331355769658336183",
"112897484209053849843358035667591311904",
"224516801064221010482987429431499494367",
"80720173834798061136722061945661316017",
"111562059216017219156961273674759252949",
"54207177433165333590347457233585026606",
"131188553345946214122710354504509107067",
"190449982943423811282329694010566143580",
"303738042627860900493949019575211275321",
"90568632779084742269536151558122106446",
"245481306658745018154669348528826762601",
"82028718455232199555940969721969888040",
"3055660987968255266510203258542869979",
"116838746135667369859169559947011896477",
"207026262901824807364703409109988858939",
"181263012738262254769162621501415916369",
"165204481446426518277357661478605434069",
"133270916786034688877108177872484248983",
"91092774753663966444788623791999767837",
"110479239338273982365308175605824708683",
"190937055316392406505756878557777886242",
"30094719961682262806564767270043271755",
"3766323897150125232715856954938005077",
"39913074883274425388580718758891249198",
"241770488961796001967093756310351828794",
"121037424769914522987885398671335527096",
"213018209905550192925448875721437228321",
"61483461180237364004021622998428144531",
"213597283697717998187254848791332279290",
"331653363205297872835483910134418811242",
"281594638723530021203739230720295323758",
"120282464704706807798331950885379203447",
"322118460077198032785392722142794560509",
"268018670355136263402525135167322975435",
"311614424387116667521688372781900468508",
"180317166018419490174214703307802026073",
"134945039939872139894812405138468770793",
"238125103618994766435403126379851054778",
"84094367706265173068207084224783564422",
"264872115175471056178306242777020414058",
"323480221463327973446193427830059930753",
"203291283828666839869708273750578995738",
"287328051558632726076571358977221100313",
"34101621067825254949600036953187803567",
"254275677460663438692565610912008975970",
"203152056024726387935029773193222687265",
"280697928943879683076560995116387390873",
"191520692855205268948857629078628573480",
"167156031906365538170499466835879278133",
"20249272178932504080765776682608083178",
"206197250684380503608179358532324937525",
"155872710571696829194538709048736042711",
"202255489717701660484661947087584188768",
"178426609862754622443240565012665415612",
"199738325842105572006134708472164592665",
"101405905161955678711535368829732564947",
"116106171763581760426158365228673328451",
"240211287685431954026869051027172685746",
"131162786021818613315438751235658584579",
"215644309648819822049917534710127206986",
"4860383511188579166980594368329933110",
"140053450383565417636528806069998298461",
"271142525018430737901171605288178213611",
"59909528035911668813131382759584938668",
"340108825656911112163771688461720425543",
"252887868283340504150789786296381673286",
"178322451821941092966880615753526013145",
"294655123453816391748373182636696400378",
"249426146827613382148061516197933986010",
"265453396793212299921189761163568374881",
"51427383763851954184421716277052305988",
"338567365747584396827294616568273866223",
"208389286525875104006432255520009541628",
"50431491087830485410930689967072931384",
"292446036599201241386579168427693084470",
"171086820886257490341925035145214267053",
"90138068443779046341480189312700655980",
"244642753597248465251202628922894653999",
"41629895470307932137261413675178951462",
"291019276709502460721261197884759526220",
"226753105547399606679780827822692568206",
"188861655486906346851595840614314616932",
"282171935781173772122804794532288778003",
"6988794784566064514805194595309993494",
"226753105547399606679780827822692568206",
"169581127669863980523644214519392891246",
"305722335749546146542121088364502266090",
"33000819465038935645258930013638537639",
"86670261496451328219834065198052043204",
"136267421705645732340283285993712786610",
"65891980928322999790570800950052779924",
"4643962769384455786768159596806813086",
"199566255767577791554987179869884220574",
"226753105547399606679780827822692568206",
"169581127669863980523644214519392891246",
"305722335749546146542121088364502266090",
"33000819465038935645258930013638537639",
"278008564020445846653900806572250605173",
"21733004307577169144356761145074504640",
"188610618390962076463987180566167063962",
"24236172277611062570284120760710171512",
"204032357600543757006676484145710878225",
"222012327643290115014738867165968748214",
"18049837380942314793098293430034041541",
"214922794568005059433480111101721857191",
"310305999321186945549355407462024346757",
"306404321927536613271078585771233549057",
"61465897665819455144704332828049984517",
"129795513528236820873924112096605688504",
"147233215924583082427255457817652995777",
"196219373631326897322447051707062411660",
"206595255677594518699886046514195897793",
"328804764142056899532332528101526470096",
"30335218160733348632488949745004534068",
"103723958063997608671997521352063555672",
"9404222282764578405319823669472915614",
"219049737335778557370251245672320723566",
"1457849475289739230481619192179326922",
"206595255677594518699886046514195897793",
"97437622749656235715027948854915484310",
"226753105547399606679780827822692568206",
"169581127669863980523644214519392891246",
"305722335749546146542121088364502266090",
"33000819465038935645258930013638537639",
"4754595154344040981122123569524976599",
"308927666549115342731265776325872666372",
"206283135650741611422053155860789171082",
"229285173530083474048740122409553246471",
"223561479854517594517265444500839653568",
"301507747465671776852519049890370832408",
"207139340764203652923796401025464321247",
"222797970592276465952726992956045466573",
"276487332793354795068785633281622496706",
"86834383389102983078688006137537431630",
"14526079518670552154501664912864438353",
"17465574005680115559671102411031239514",
"311292764242628567561060137779354840801",
"227858755260194400149057181436629548453",
"73420177335337630968617742583737240947",
"18840546398308186727881553688306349677",
"319441802657965298570502250094932808593",
"118515377699691492696636801404840602044",
"245743896483695985628765022634625353566",
"184718624852067991711818128771604922122",
"137114722959304927126631508992674454621",
"311015242686365487836078314658235486862",
"142028721422013780397179920004715113548",
"162919939171402404896412240219183058234",
"251201593999376525999168345918498741000",
"26132648280450670609907414065315997698",
"53337313357654572852101111465716068805",
"226753105547399606679780827822692568206",
"169581127669863980523644214519392891246",
"305722335749546146542121088364502266090",
"33000819465038935645258930013638537639",
"141505158813479622510182120315602033823",
"152369416909107933490431590554662655067",
"178103534351773899071093329157889511830",
"86209236692817866174586724260504108539",
"128528105163007454092089415116891569484",
"306357877486736821803331761836095249170",
"214615845272728076737905596122847554455",
"46878219244809943001628198150592884483",
"84937453873640912192203807935240835850",
"46271817560664783396639175685650645856",
"217491245418813477479973441870655620433",
"31667755086374341124561309820920998733",
"136874385774377380689790783440536193412",
"71430196177731736345514883349195739927",
"4882193111895916788851289797718360525",
"226753105547399606679780827822692568206",
"169581127669863980523644214519392891246",
"305722335749546146542121088364502266090",
"33000819465038935645258930013638537639",
"86670261496451328219834065198052043204",
"136267421705645732340283285993712786610",
"239995142586773639375631407041720156214",
"71904078272202369562904718778461634594",
"303271080954689959022341459200799956953",
"226753105547399606679780827822692568206",
"169581127669863980523644214519392891246",
"305722335749546146542121088364502266090",
"33000819465038935645258930013638537639",
"278008564020445846653900806572250605173",
"21733004307577169144356761145074504640",
"188610618390962076463987180566167063962",
"24236172277611062570284120760710171512",
"204032357600543757006676484145710878225",
"2849099040497705597961944920920882374",
"204223270103308804669626146606426930895",
"46836226645145247907887993538481650371",
"68520883852552388582451638024673279430",
"25192939428834325088181628414838432008",
"122649267106200814732686185034766716035",
"70832132515800398289406984090237891271",
"318107755750981108804111100793754182373",
"196219373631326897322447051707062411660",
"206595255677594518699886046514195897793",
"328804764142056899532332528101526470096",
"30335218160733348632488949745004534068",
"103723958063997608671997521352063555672",
"9404222282764578405319823669472915614",
"219049737335778557370251245672320723566",
"1457849475289739230481619192179326922",
"206595255677594518699886046514195897793",
"97437622749656235715027948854915484310",
"226753105547399606679780827822692568206",
"169581127669863980523644214519392891246",
"305722335749546146542121088364502266090",
"33000819465038935645258930013638537639",
"4754595154344040981122123569524976599",
"308927666549115342731265776325872666372",
"143539444587756774324326442942457966815",
"87537452802883009782894033719814150227",
"309474717262308586768164485327212773440",
"283808756536638907134427760005525551177",
"301805255474759984192632647222885051282",
"52375556850406217631422824916956782454",
"178845188911789849550175667453864763805",
"64202057295841491653309735667604208794",
"162919939171402404896412240219183058234",
"251201593999376525999168345918498741000",
"26132648280450670609907414065315997698",
"53337313357654572852101111465716068805",
"226753105547399606679780827822692568206",
"169581127669863980523644214519392891246",
"305722335749546146542121088364502266090",
"33000819465038935645258930013638537639",
"141505158813479622510182120315602033823",
"152369416909107933490431590554662655067",
"178103534351773899071093329157889511830",
"86209236692817866174586724260504108539",
"128528105163007454092089415116891569484",
"306357877486736821803331761836095249170",
"214615845272728076737905596122847554455",
"46878219244809943001628198150592884483",
"84937453873640912192203807935240835850",
"46271817560664783396639175685650645856",
"217491245418813477479973441870655620433",
"31667755086374341124561309820920998733",
"136874385774377380689790783440536193412",
"71430196177731736345514883349195739927",
"4882193111895916788851289797718360525",
"299465927010442665070272329441342725229",
"236012498155607220368478483405782740428",
"326300283643025825391153291269196046788",
"175668668429948647903021642513190204549",
"44174934414318073371262600747898688938",
"242729836748607666003635020650702948332",
"289148895464106391011939137051560837102",
"326300283643025825391153291269196046788",
"175668668429948647903021642513190204549",
"44174934414318073371262600747898688938",
"142712119848556634908967264961435266626",
"305140331895236090201895353751437712822",
"37494124852913246586627241003597170009",
"176919441413705986120293803319884116119",
"164904415278518726596976675322773361909",
"127422386332591331535681709505402619643",
"181204903615383431508646987736938010653",
"199566255767577791554987179869884220574",
"186150449645553412834348688472514823647",
"14185655908332174548865769586728988467",
"257649365532956670337163657952054876146",
"325737477151837594551909479275698572757",
"21119604289513074977550612678616470166",
"103381303582132586801736983938894439288",
"274622544206191716953139237654757202781",
"204032357600543757006676484145710878225",
"222012327643290115014738867165968748214",
"123685399764519596444408294234895360617",
"317012447158577873857449466493308524613",
"123664446400938470788999182695652545758",
"315619863695267755187954452366717846228",
"206595255677594518699886046514195897793",
"328804764142056899532332528101526470096",
"52771952232427006148249426559452755625",
"157198795336273700723197616105485610278",
"288838524356407151308798230073314323100",
"189807494208735924210512698614642347216",
"270102258523117417536500089990017048056",
"303493897564804533536413647395779013026",
"34193114229771083965802512867870863427",
"162919939171402404896412240219183058234",
"251201593999376525999168345918498741000",
"26132648280450670609907414065315997698",
"53337313357654572852101111465716068805",
"5159781378480589619676455278520886229",
"152369416909107933490431590554662655067",
"178103534351773899071093329157889511830",
"86209236692817866174586724260504108539",
"278568998462368863472479644354732529423",
"306357877486736821803331761836095249170",
"55505267278268076933466306606797256475",
"46878219244809943001628198150592884483",
"84937453873640912192203807935240835850",
"46271817560664783396639175685650645856",
"11928336460110758629020496803907730321",
"31667755086374341124561309820920998733",
"136874385774377380689790783440536193412",
"71430196177731736345514883349195739927",
"4882193111895916788851289797718360525",
"48759604294879925887271774491152643174",
"280277152944665861921989561395965790540",
"269993641609796466011246312503704114801",
"293106699655554277677531674116959807615",
"142712119848556634908967264961435266626",
"305140331895236090201895353751437712822",
"37494124852913246586627241003597170009",
"176919441413705986120293803319884116119",
"164904415278518726596976675322773361909",
"127422386332591331535681709505402619643",
"181204903615383431508646987736938010653",
"199566255767577791554987179869884220574",
"186150449645553412834348688472514823647",
"14185655908332174548865769586728988467",
"257649365532956670337163657952054876146",
"325737477151837594551909479275698572757",
"21119604289513074977550612678616470166",
"103381303582132586801736983938894439288",
"274622544206191716953139237654757202781",
"204032357600543757006676484145710878225",
"222012327643290115014738867165968748214",
"123685399764519596444408294234895360617",
"317012447158577873857449466493308524613",
"123664446400938470788999182695652545758",
"315619863695267755187954452366717846228",
"206595255677594518699886046514195897793",
"328804764142056899532332528101526470096",
"52771952232427006148249426559452755625",
"157198795336273700723197616105485610278",
"288838524356407151308798230073314323100",
"189807494208735924210512698614642347216",
"270102258523117417536500089990017048056",
"303493897564804533536413647395779013026",
"34193114229771083965802512867870863427",
"191558426688649023224713929273522949396",
"225984577765728791115968571566471960921",
"309474717262308586768164485327212773440",
"111487401588967055259763720238834852801",
"138050754154247896499394332927955930519",
"324209497609420142325270377299110543558",
"163534465762238176386886268881190046674",
"11030016238262190923737096659520749562",
"162919939171402404896412240219183058234",
"251201593999376525999168345918498741000",
"26132648280450670609907414065315997698",
"53337313357654572852101111465716068805",
"5159781378480589619676455278520886229",
"152369416909107933490431590554662655067",
"178103534351773899071093329157889511830",
"86209236692817866174586724260504108539",
"278568998462368863472479644354732529423",
"306357877486736821803331761836095249170",
"55505267278268076933466306606797256475",
"46878219244809943001628198150592884483",
"84937453873640912192203807935240835850",
"46271817560664783396639175685650645856",
"11928336460110758629020496803907730321",
"31667755086374341124561309820920998733",
"136874385774377380689790783440536193412",
"71430196177731736345514883349195739927",
"4882193111895916788851289797718360525",
"181620923318624324722071235557813810586",
"133488376080942224905357996357312543848",
"182076330827743562238354366313841485443",
"294169728741053690309494553193325408324",
"213796331004939854437652818781706932471",
"167780863982027853053667753482079596455",
"189787768490733725109625866695611788877",
"274184954583871598238813314418281797618",
"72394093365945540519991603337588485539",
"238046644627750928265990523896914533592",
"194583578392382202927823253748094262353",
"2841701074147147618106345143643809969",
"116749913344956385468838700438657412834",
"185480312054152940390366627279317126483",
"146199883500975478651909574028553793760",
"314261134748130361078080577025718161867",
"127672609541783594982786654439885102355",
"67590262910684096610219032895585711557",
"208414542906684625207798627151900188468",
"178234629931629172168497599239739648175",
"231147411848316433954436757918969260120",
"110554598839706222555050107112675419035",
"175668668429948647903021642513190204549",
"44174934414318073371262600747898688938",
"263983240860945341273286932893316956513",
"84702508657241365905026589278875829674",
"111758456168791113451938097489517998142",
"203232346818606510662947388798249934791",
"17330979164373500275928852572457201660",
"84702508657241365905026589278875829674",
"111758456168791113451938097489517998142",
"203232346818606510662947388798249934791",
"120810776411477643036192197300019724549",
"84702508657241365905026589278875829674",
"111758456168791113451938097489517998142",
"203232346818606510662947388798249934791",
"315114953496533628817539066875053691984",
"84702508657241365905026589278875829674",
"111758456168791113451938097489517998142",
"203232346818606510662947388798249934791",
"263983240860945341273286932893316956513",
"84702508657241365905026589278875829674",
"111758456168791113451938097489517998142",
"203232346818606510662947388798249934791",
"17330979164373500275928852572457201660",
"84702508657241365905026589278875829674",
"111758456168791113451938097489517998142",
"203232346818606510662947388798249934791",
"120810776411477643036192197300019724549",
"84702508657241365905026589278875829674",
"111758456168791113451938097489517998142",
"203232346818606510662947388798249934791",
"315114953496533628817539066875053691984",
"84702508657241365905026589278875829674",
"111758456168791113451938097489517998142",
"203232346818606510662947388798249934791",
"178234629931629172168497599239739648175",
"231147411848316433954436757918969260120",
"110554598839706222555050107112675419035",
"175668668429948647903021642513190204549",
"44174934414318073371262600747898688938",
"128965156107283617397888827812031057701",
"289300026876219842755988442235897668061",
"258012293831062184751380125715604472306",
"282963009071550573567626096525577901146",
"167780863982027853053667753482079596455",
"324600810067307187110884989632195841869",
"305495927268790603235290632687820352329",
"215213859786202222648222976896687392418",
"185734354158474048915867667415197494772",
"323500289811978058877707504576941590026",
"83821676001338550848981936322530039609",
"325899402189672350227513129432618508878",
"245986343402559250483465750549359141852",
"35210587495980310315026814735398011009",
"28337547768170584345632013528322477960",
"269629402712010957506111113222471129772",
"112044982464207942875637204429207186331",
"120854366365619060084968932351551458178",
"191376584895030489385309146192294833863",
"325489435566690325806768882183636711303",
"188902937384436600807962894453874142750",
"334140465400033762892826487862766160977",
"202729768550773708016962129574940611650",
"44348903761416999593971441783230554888",
"144867113453608231826594868901632708073",
"283762305878302620304157091956135293298",
"321013074521582762510203764708042426555",
"134513279482563281692355372427556518367",
"292704581697362916005422477699947274423",
"335982735930800936579429488890020820997",
"239038911484117257507808223469606079636",
"113493892521503399316867802286216825149",
"112044982464207942875637204429207186331",
"120854366365619060084968932351551458178",
"191376584895030489385309146192294833863",
"18223649561269294887984241894048591145",
"189230566618005751851607219887988332133",
"6081010522542761567466903430637781136",
"80428741248227561076038788666378399279",
"321013074521582762510203764708042426555",
"134513279482563281692355372427556518367",
"292704581697362916005422477699947274423",
"335982735930800936579429488890020820997",
"321013074521582762510203764708042426555",
"134513279482563281692355372427556518367",
"292704581697362916005422477699947274423",
"335982735930800936579429488890020820997",
"36556701131764030032725990407606591324",
"275677095118521996826139815564355110395",
"36893044600648284245768382767298348131",
"178652199250986701750727262420178293131",
"34833316643123697576106095940325009030",
"246002595371267479777860656551284439804",
"227769351947986113456444778383641820522",
"119842080971185535959696959005219472445",
"51993476549289832360531806422794349078",
"72758568794049723612321248380050180915",
"73980693055210912847162841870073711009",
"59076506931193263901214784912649452280",
"65176910559790504017711791436394862393",
"234026740816234279320007774059765391415",
"211105337874665277612564025257597877704",
"147704421757390667503898822848826996543",
"276277401757724374722100204837285765298",
"326946427491089639772642742180711582183",
"320012265522107474644107831312563456245",
"40967202493670784560231740124425929919",
"285011123002971721869643305030144655557",
"127356447711480117892470243421240442977",
"226775189482611033442388949572439473684",
"727519287766028538004643158278148891",
"136200471634549015224287745965270138010",
"51723296324174609775945994931051373690",
"213945551326295627088184777740093109789",
"247449097778197580424011311307351789688",
"228346154177532885855588614184552369038",
"123664446400938470788999182695652545758",
"315619863695267755187954452366717846228",
"206595255677594518699886046514195897793",
"328804764142056899532332528101526470096",
"30335218160733348632488949745004534068",
"112203274486159994439875848403042718291",
"53716926977486233703859769370631724317",
"189807494208735924210512698614642347216",
"270102258523117417536500089990017048056",
"318885413586655135345391630706556908825",
"50486042125331443936778490522803250422",
"54252459520603700000888255706149201645",
"205967811399522372471090868277335577168",
"241759507009097311561433971552453516191",
"336231898552839825981305235415380193408",
"338783557608074308084193921654000819893",
"19654087022353133762277028049244559088",
"92106248298088526857591286964505089804",
"117790886512985091069039325045225577196",
"162919939171402404896412240219183058234",
"251201593999376525999168345918498741000",
"26132648280450670609907414065315997698",
"53337313357654572852101111465716068805",
"77555536574147483122366686755333911503",
"254122347630779693590818700550817016867",
"13534417897664537315119024326196869183",
"201377964171124534364078630702870491629",
"113146777228672073436614024795752737393",
"306357877486736821803331761836095249170",
"96700120946421298699724183458977012558",
"317475226460369086238136090890303340656",
"97293463018758647582089573345733005892",
"61774394277645672560638078987103198403",
"309385234486219161579462041888201146467",
"31667755086374341124561309820920998733",
"136874385774377380689790783440536193412",
"71430196177731736345514883349195739927",
"4882193111895916788851289797718360525",
"277524259757942246503840802164382473985",
"200669429764739761441336239206616735361",
"92637393776000105781882499655261327678",
"294169728741053690309494553193325408324",
"213796331004939854437652818781706932471",
"167780863982027853053667753482079596455",
"96283654669975236008099624591103122899",
"285065811499904953084083190883065584302",
"44851767915808972216824164758189952428",
"200957611601280676300470748330133732107",
"233122549281995387359107994101340666117",
"324617343666215042018256431905444868369",
"114849088825314174370983586326539382340",
"127309563886424831506659736587552543828",
"290121833107685760860105076661331962588",
"38792034502816375049660193402525444612",
"99905655723326267387817124997406889293",
"99124136187266532075879783838780743785",
"162679139662097999686719243478495798462",
"6377452484239469112054272408331051626",
"64020591725305644077698605067882084542",
"207020832750664446513808100219878351836",
"224341189383459115961674427024217139538",
"255490843815693963497987903513712233702",
"152685782496025349195640721068822236166",
"122171879115978689952055624725146768487",
"204032357600543757006676484145710878225",
"31964826220892563190508039497303876440",
"137832329447050902737874135721898741763",
"265908325941727572848719013740110323560",
"217597295655153668105285076245411215656",
"147233215924583082427255457817652995777",
"196219373631326897322447051707062411660",
"206595255677594518699886046514195897793",
"328804764142056899532332528101526470096",
"30335218160733348632488949745004534068",
"103723958063997608671997521352063555672",
"9404222282764578405319823669472915614",
"189807494208735924210512698614642347216",
"270102258523117417536500089990017048056",
"318885413586655135345391630706556908825",
"50486042125331443936778490522803250422",
"309505630073326561293629415380965258723",
"309474717262308586768164485327212773440",
"283808756536638907134427760005525551177",
"301805255474759984192632647222885051282",
"324450640554580327202667130297896183930",
"326814356238414895258476408937007246645",
"126843707097237650120056516885577260214",
"162919939171402404896412240219183058234",
"251201593999376525999168345918498741000",
"26132648280450670609907414065315997698",
"53337313357654572852101111465716068805",
"31667755086374341124561309820920998733",
"136874385774377380689790783440536193412",
"71430196177731736345514883349195739927",
"4882193111895916788851289797718360525",
"39077536332336494230375252957937612789",
"39786621182199343779352676360051719095",
"55138456418019078610359252603064542351",
"33716252159700376904235214278242667445",
"249018962552916825402578018716406969990",
"178730959559937183211442801074362255051",
"38423023598503311684531640486994331742",
"294169728741053690309494553193325408324",
"213796331004939854437652818781706932471",
"167780863982027853053667753482079596455",
"180070505893979968555046724692650473237",
"127213390431344453705460064043102033849",
"71255152705483214930989340119268742366"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-5ac63679",
"target": {
"function": "getCropOffsets",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "4565847699931939101413726953557958475",
"length": 9211.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-5bccd520",
"target": {
"function": "main",
"file": "tools/tiffmedian.c"
},
"deprecated": false,
"digest": {
"function_hash": "216309081236652524340149791642222071729",
"length": 4892.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-5d4dd0cf",
"target": {
"file": "libtiff/tif_ojpeg.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"304895444708319713285575580943851555930",
"314382963814722533387527699000802107851",
"233725556085635123924871222142600190455",
"323886445922764877668982077252403000219",
"190951385019081748281320082333865672481",
"26254582094769468281383373922252749648",
"66655707144291047575734902598691494132",
"235386044944407839502967892664084218289",
"103304586843318874125710435566654949467",
"23845253470145479183314343937172176306",
"199598878468708586736347744299287787983",
"223048465661507360532847125135431390340",
"246186767063387125930469882224782363785",
"146309499490492523268429047285833576798",
"89350040896141275546952312377736658393",
"82143167506389986848986987886588283277",
"187685348381090102330297889361191165927",
"338217888061408088639525284697693063732",
"271437316068959376287447658250917434992",
"271804836525521188756447713216652275000",
"248457514221057144215011769321223072399",
"295936503506419659550834728982689724014",
"264822635919422746650596983100237182346",
"320439234217036448288858171125843778310",
"319954710872312922105067191627341616927",
"149902235073785146244873718934921566134",
"173882438550070548403560601009538890169",
"221413961691307480465412086767310486927",
"264686006084847018414419694856771745637",
"3777448510325631166614872164281814710",
"7670907460500589123435960736501522161",
"52595758987718285380309330000734328690",
"270423386051747338730299705129752595072",
"271927775301993965970323727476023193527",
"283976568404258337155397155333005030162",
"40198531723112758947793877470445535860",
"70792223769858738101912883300392817233",
"283599399662531408526416444073015525514",
"76452824147001425337761728190119804148",
"254354643451426216619251359873231165492",
"208114251353603894268400361100326362928",
"109724003951175256938099247569432034386",
"165636913461017233740140385145507499203",
"18989875141803681945321993323881745722",
"114147724342188494706626175965651985719",
"89910199191946514738969586427428885326",
"34217305253546982612962402941703982285",
"183673130057501649037569822551187313207",
"4225444440483388954773495900221034699",
"301892626508241317322497359511428817736",
"83808151915810084970970055391095021898",
"336034533820400677956560293134032263258",
"57115493717948869425702629669353471867",
"255114358698788087763125688928847182563",
"4708719882372697874667530019647702963",
"275402570165731143651566182558632757152",
"218616675162252674764541995835805039358",
"4360734839159770549333895423269235946",
"42973556515618266180869137293520295105",
"127350998827093504121352963074784076170",
"265385128551572206842986815933466966674"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-5ed2885f",
"target": {
"file": "libtiff/tif_print.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"300301572028387648955995909348199597446",
"51611422797576716188043860270910959598",
"238496482901360748002612357411904395137",
"313230043688542573731507014636804104173",
"115026658732823785076003193774646374050",
"122829080586459917326929415692125869843",
"320841194924060075519861110777176249702",
"172901219458598510299569048940759767127",
"120244453154546174610731492067566559959",
"261592337523368677401827711901523977807",
"46937719877453438777536264120618794373",
"67851176565861846350838177955482402046"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-5f16eb6b",
"target": {
"function": "main",
"file": "test/test_RGBAImage.c"
},
"deprecated": false,
"digest": {
"function_hash": "152262120181930450590698834253634264442",
"length": 2958.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-5f8deb6e",
"target": {
"function": "t2p_write_pdf_catalog",
"file": "tools/tiff2pdf.c"
},
"deprecated": false,
"digest": {
"function_hash": "332007582603630842105340153571029495501",
"length": 702.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-5f9f9faa",
"target": {
"function": "DECLAREContigPutFunc",
"file": "libtiff/tif_getimage.c"
},
"deprecated": false,
"digest": {
"function_hash": "11602454119770203825829358499407212732",
"length": 409.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-5fdb39ec",
"target": {
"function": "psPageSize",
"file": "tools/tiff2ps.c"
},
"deprecated": false,
"digest": {
"function_hash": "34357791935306401775755620987854596143",
"length": 4614.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-605da4f4",
"target": {
"function": "TIFFMergeFieldInfo",
"file": "libtiff/tif_dirinfo.c"
},
"deprecated": false,
"digest": {
"function_hash": "93598980758227480683938108887007841776",
"length": 2816.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-6089057a",
"target": {
"function": "gtTileSeparate",
"file": "libtiff/tif_getimage.c"
},
"deprecated": false,
"digest": {
"function_hash": "67527109431022905991674471575991594307",
"length": 4111.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-60bec699",
"target": {
"function": "main",
"file": "tools/ppm2tiff.c"
},
"deprecated": false,
"digest": {
"function_hash": "279442198312464690696516385446548736847",
"length": 5429.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-61159725",
"target": {
"file": "libtiff/tif_aux.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"50433994497572608852495532308352755891",
"157735187856759018994069499959673186206",
"240152967270086879817095041711034012181",
"334256310000647965532326773179023965651",
"110405092686866253743380757850756893418",
"88301905479493520129865471113155821317",
"167438519939785467525637870132469537401",
"60306739265847151817720110075548444096",
"144126412109998901447751639221300035035",
"204387465774568663339731951952451210774",
"263688466001953433279778745817110760883",
"84292878358859392212036075586503076843",
"129013233641909671843420264443000913465"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-619763b4",
"target": {
"function": "t2p_readwrite_pdf_image",
"file": "tools/tiff2pdf.c"
},
"deprecated": false,
"digest": {
"function_hash": "94791484682214000362855128612349226847",
"length": 17018.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-6216dea0",
"target": {
"function": "test",
"file": "test/defer_strile_writing.c"
},
"deprecated": false,
"digest": {
"function_hash": "293682200441045975301184107101401800726",
"length": 3660.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-6291602c",
"target": {
"function": "TIFFVStripSize64",
"file": "libtiff/tif_strip.c"
},
"deprecated": false,
"digest": {
"function_hash": "127689832951778958737138983412893934670",
"length": 1239.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-62f893c4",
"target": {
"file": "contrib/addtiffo/tif_ovrcache.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"45264869904508063132394877451777142183",
"123897205216411499636511836571879089409",
"17909048777026815900452333317002186261",
"100483840292326941009608733802657901986",
"237794616457794407517758455975851392216",
"283090402494141495892840697838891118965",
"246133386995955830803725596505905461653",
"106671694144497906287674979225710228362",
"278819666847132070501524430483984085599",
"222396791328394963215822811378017815609",
"266997676739766323287732290145987427409",
"134433286527382792998301930308178543809",
"166508027971147613273791346286037094864",
"146927626250450034246905993647972132459",
"71381547513556221939991237363614365617",
"51422185265037578961634372354001702398",
"260558555799045911221517211093801346978",
"210121593223343439664472615408272623538",
"969220458650367354242264328752454995",
"296501760458433682169052741835575502468",
"264292305991098961466354311540697281486",
"154224370791113529227345010777642960293",
"9164288583346109949409254755079587091",
"49715214636783692001596883280347094724",
"172403706916386763469592497053877420476",
"121029256751079026117154978938078025643",
"296874560406410214258827705794159891479",
"277242787613709579231805310150806715279",
"333328113345420468940456877379116809074",
"335985412035943156320827980611510582112",
"203296386462856504050235381153715849659",
"182972483606656727434211676502352994944",
"82411675528397609328443089717437351703",
"275289619697564506693199844213432646602",
"217894640796773709253391317507799163517",
"182862796261281940927514271014333521095",
"236881981400752720380429453968678352932",
"244888056840517287954979618354257951862",
"309886367522620820581580746578548350160",
"21260295128525321862427257722432212272",
"125475629737904692597831874956362466618",
"277242787613709579231805310150806715279",
"162678985750228578082573818501898470144",
"23435421571661138779181428220961917877",
"66971901137059333609006092878959313501",
"273303097255741494885156402206892941311",
"275687834977227041586877057614958105075",
"338335443399707646074523985920176118365",
"15156052739310926352586720759306307831",
"184203534231541825664724873051338835427",
"244888056840517287954979618354257951862",
"309886367522620820581580746578548350160",
"21260295128525321862427257722432212272",
"125475629737904692597831874956362466618",
"205050185884546270254941577040317890373",
"40081604504307668149923094804181141132",
"33174492367205454291581366390324507011",
"31689193802340800974889436731280936045",
"229034961877886582600395962833582525186",
"144099227453177153351577418162523439610",
"292843711234615361701874526001974181960",
"272671299680941554087988683623179308495",
"181965451257059799490758100449772074295",
"324219340856578891703155695189501972454",
"33125075898827113178524169626033905554",
"259281277851528160457571203535741781602"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-638e12f6",
"target": {
"function": "extractContigSamplesBytes",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "3053902664077135430081514660947929549",
"length": 1377.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-63b537b3",
"target": {
"function": "write_test_tiff",
"file": "test/rational_precision2double.c"
},
"deprecated": false,
"digest": {
"function_hash": "227831933041698899583991505974725139874",
"length": 20267.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-643e7489",
"target": {
"function": "OJPEGReadHeaderInfoSec",
"file": "libtiff/tif_ojpeg.c"
},
"deprecated": false,
"digest": {
"function_hash": "159084807701143593843824961896860803906",
"length": 3377.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-647776ce",
"target": {
"function": "_tiffReadProc",
"file": "libtiff/tif_unix.c"
},
"deprecated": false,
"digest": {
"function_hash": "144898189087598302637877409304538260189",
"length": 535.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-647dd758",
"target": {
"function": "ZIPPreDecode",
"file": "libtiff/tif_zip.c"
},
"deprecated": false,
"digest": {
"function_hash": "150070223738659316055404612063033983308",
"length": 548.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-651d0c49",
"target": {
"function": "write_image_data",
"file": "test/test_RGBAImage.c"
},
"deprecated": false,
"digest": {
"function_hash": "149679228401709176131462249526617944596",
"length": 3715.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-65cc5465",
"target": {
"function": "Fax3Decode1D",
"file": "libtiff/tif_fax3.c"
},
"deprecated": false,
"digest": {
"function_hash": "140687767740220117057063572549813942704",
"length": 1041.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-66a77c9e",
"target": {
"function": "ZIPDecode",
"file": "libtiff/tif_zip.c"
},
"deprecated": false,
"digest": {
"function_hash": "210819555969589608733509828235232108405",
"length": 3129.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-671c0cf3",
"target": {
"file": "test/test_RGBAImage.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"27269873421584626882327168340781722555",
"30487997165513734213938007998328326208",
"281785994427152112041905763047442263876",
"61029305922768867612399036832772477898",
"237502202212047212469245501913169171623",
"7672724737493024309942334949382527425",
"321881947624292611677605271694383293463",
"77617398838899778952243830731642681646",
"13601282182708166582719003863786616021",
"256778217065619062611970687477179245766",
"200038773246198499442854467525609920234",
"156725418614567851427457224808617203341",
"276550797382806663323409749885678287728",
"124524342178431190285118761836213315209",
"62783936561708745159954934982503945842",
"137504008644471482004941663617909254658",
"225952517664389527260076288440249899008",
"29947873292549169307314454352190930851",
"145807505809408830915098217036353247543",
"235334324253455186300429504654256303007",
"200213412394649824761568789922977888079",
"296151762275784025631798145534458525419",
"35175708669262630891052893972857480156",
"328851801953391622918372178077244802649",
"225922029306754490978515332128753072191",
"330124442849256350519168970373304863901",
"28088385446354216640719995168840126194",
"322685010787966293202241798795682279066",
"151180547734269561779862979622078714367",
"49073329042727225512417155977382732313",
"174043977635000620776070151279351975576",
"131855853318699130595431037696613447048",
"276135899212547953290072741307602372364",
"108045513091151076343354682691708457923",
"236309804423794517271357069373916344496",
"226068428518996103108000583475253233688",
"205659784277641528783668486162946416948",
"206381165216390799942033281181477788057",
"317477160090492313401304736752821080013",
"51114787657414408878469433601402166911",
"65869350588316564108762934717580107033",
"96443872001107563783131218428915053742",
"86695101652439314608978971223213632884",
"307093337567356100484182652844875309095",
"229833553068783659441431700795121421715",
"29168122616003989349455026446019426611",
"173114032231869082819236847537337019470",
"226068428518996103108000583475253233688",
"205659784277641528783668486162946416948",
"206381165216390799942033281181477788057",
"317477160090492313401304736752821080013",
"51114787657414408878469433601402166911",
"65869350588316564108762934717580107033",
"62568113567485778734100536445307937114",
"86695101652439314608978971223213632884",
"188724934185449947672193376541115763605",
"242387304779749894086154236871566102090",
"69104834314399311752599298508599739311",
"37150206454166953442152912326547057039",
"80635699861213170379673034743198902784",
"174518307775876438983248653285807480272",
"6092765806991599246992018879412504650",
"339556326185498989259435740531455279511",
"97177116238643953266315483950909372605",
"129071991499753803638709636837595057790",
"134477453324496143690417770575544259561"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-671e2fb9",
"target": {
"function": "TIFFReadDirectoryFindFieldInfo",
"file": "libtiff/tif_dirread.c"
},
"deprecated": false,
"digest": {
"function_hash": "86030851217571872215277131309970178800",
"length": 562.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-677eb35d",
"target": {
"function": "initImage",
"file": "tools/tiffgt.c"
},
"deprecated": false,
"digest": {
"function_hash": "288066219841288610947442943172850546027",
"length": 1171.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-681c50ef",
"target": {
"function": "test_EXIF_enlargement",
"file": "test/test_IFD_enlargement.c"
},
"deprecated": false,
"digest": {
"function_hash": "320351941414533469313748611269550761434",
"length": 6027.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-6852155a",
"target": {
"file": "tools/thumbnail.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"220414968413682999297743329538072993522",
"82540532477828301712548180552571999000",
"204803879913891328315311115926333838346",
"183761140283615108135673991055941247663",
"262962260009922365565596510273991650785",
"154524064641525325900814949673093841524",
"132372808619986336525233958286322524370",
"38765821686331451969723142347569955230",
"49801338330848502860662734483919801054",
"295994122633408589847304286150099039645",
"247120619841211556053486251844621742952",
"326753290123616769456940945459631787268",
"260149297944051543218528886152741634505",
"101557166752683050737111622889559744526",
"331104742151448089199987252530992908188",
"109091769967485162571723518260880111027",
"205102553723944025555935706169319726678",
"70673625838638563917201463735174032282",
"105386216572143889654115715060081039578",
"79319987975294301233662870318613692808",
"145344243587722047459533076842504804240",
"309270833053695106001354621558400865016",
"38522883127412984003918262674135512949",
"324007304993590689470958269341782006217",
"131797841112786928702487763938992960584",
"156120744134794270072100616735676563314",
"30666802895934952566953772517090702247",
"264971923528211508720450174241987531932",
"124215814271920647221586414342922277845",
"259897606813673574846036550130526470772"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-688ff872",
"target": {
"function": "ThunderDecode",
"file": "libtiff/tif_thunder.c"
},
"deprecated": false,
"digest": {
"function_hash": "6139447243100348871090939476562091642",
"length": 1916.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-69852fcb",
"target": {
"function": "rewrite_test",
"file": "test/rewrite_tag.c"
},
"deprecated": false,
"digest": {
"function_hash": "31426128236852728142781332134942649935",
"length": 4160.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-6a79209e",
"target": {
"function": "printTIF",
"file": "tools/fax2ps.c"
},
"deprecated": false,
"digest": {
"function_hash": "175798204299703017031108095568797714221",
"length": 2384.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-6ae09eee",
"target": {
"file": "tools/tiff2pdf.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"154519178153670748156204889575192980339",
"163825873583295919986988220163429839596",
"275539548135264198035250022848098365634",
"266867222094244509279015188339894992862",
"137759993631387783415567737640867848945",
"260403379010899486283743218140093463386",
"163213418642671494933780638031532131869",
"55182151491468893586505553706862904449",
"102022008832097656077178612312607671430",
"140063291313207804366828408254997183382",
"288073299221550840816477530961277794767",
"255533389139219277456515725484485737321",
"96130727878824965315120415156220033407",
"89299286262735705463729679291807647214",
"78495838025873589178895702076278770863",
"330534166917157519403326932486896248698",
"49176430763565916570900677750066249032",
"248739588104246506853396874702577768227",
"162251961393843764635902095179589967660",
"223997741946232781484980259949062053072",
"186951486860902101275087121593311525944",
"103464560005196285469348042104871328296",
"159533507906613613931654746850176826014",
"108216573253500980971988195423026246508",
"64499277152972945391214933420346269485",
"121964263640588645992303917240041701770",
"146678571340996841835805621054810260646",
"232599953310693386707342098197293464978",
"263527057340760684089897989431481244492",
"129690611573002356693034801016059912936",
"308457262421716674880910138589739212131",
"216461328098136912571014485305003805883",
"29508660118261715654513381063365813450",
"202671601369994639526178908233240534132",
"134541895519380924047706220816779566938",
"28073712132098460492366238485088665895",
"297224013851725873836760219938772469144",
"160660372432047543245342635216565184288",
"339188618028188267259726641399387905894",
"28073712132098460492366238485088665895",
"297224013851725873836760219938772469144",
"160660372432047543245342635216565184288",
"339188618028188267259726641399387905894",
"28073712132098460492366238485088665895",
"141852241063576874970659725958983240747",
"325076079627908334886544333805896231682",
"279131170554630998848884919837338721732",
"288724511717003313548608474580146015140",
"93437345820666305101103084241616319890",
"255850712752522221758009400740717868561",
"337406627146358213341369923415602051910",
"316226720915096375037865460373419023766",
"28073712132098460492366238485088665895",
"55599683521406509063614714382461343010",
"338548455245692256193515624271219943712",
"193148737038101328405316080497066619822",
"28073712132098460492366238485088665895",
"297774466150859940927801044822688785812",
"271621840507153270454535968792561052894",
"132084682830073541999086877290189257205",
"195435445939453445402230555714625322048",
"208159897010316359409808593329085765135",
"284131952008830074849168929205551720907",
"238437589837064284889162941805784930206",
"28073712132098460492366238485088665895",
"145817171213982766663300474161195573128",
"168784349290648997114752381274494201635",
"319414941950202764474591701759367141503",
"28073712132098460492366238485088665895",
"155738059512570538190915882200786447084",
"198115273512102705515880723394247559533",
"121894702805938327312165712184052285030",
"28073712132098460492366238485088665895",
"145817171213982766663300474161195573128",
"168784349290648997114752381274494201635",
"319414941950202764474591701759367141503",
"328832874156185597285155263438116755688",
"295840711996813041519830215443623972792",
"239063684380601638204775391138583806640",
"316312853803878835581427778135669483991",
"324006433036551434304423105316681374665",
"28073712132098460492366238485088665895",
"45773861941734852527596646000134474590",
"131588508529962685725508861612580939610",
"212123683691107468137533627795808373082",
"28073712132098460492366238485088665895",
"45773861941734852527596646000134474590",
"131588508529962685725508861612580939610",
"212123683691107468137533627795808373082",
"28073712132098460492366238485088665895",
"100175225022373999989340914839632613905",
"269509796561384810055216355278416878955",
"193485149135176677970523995314069026860",
"28073712132098460492366238485088665895",
"297774466150859940927801044822688785812",
"271621840507153270454535968792561052894",
"132084682830073541999086877290189257205",
"28073712132098460492366238485088665895",
"107120607220025562832599020764106366072",
"93664943525788341680700622942487949878",
"318077115482634893730592024031550514068",
"28073712132098460492366238485088665895",
"340182590264014980759450323696919512457",
"59986940165406724558253201097370922078",
"17738656408971666885651995791639309538",
"325568145554800960448716663363677550951",
"17489566933469668099697920992471745509",
"169049070117621261727025543048766135603",
"98913775111423171957671865868998721433",
"28073712132098460492366238485088665895",
"150626535265193844802546250358549230460",
"84057530110281339783351428739907588861",
"50801438544184717188885866249158949924",
"97141915487982572578789904026212380108",
"322606105337738561494289070418772318750",
"269029722402069346053646895291295232977",
"122028713523714180132879899976191363208",
"85512717681315929846382898025669116902",
"85584969644618470054524890229589224943",
"220872351883375701680518762983824085139",
"63612422009037987244490949525136073381",
"225679519457357939651851663217296670802",
"219484914289412662541564082588707958874",
"97376371491719926102034488456805862034",
"156243794641481726249709853046513760818",
"100877376421408179276940880432840290099",
"326664576603568960351258787356005095146",
"144447582801998767899663444530353414887",
"41653614342444637322862108405365757748",
"280342623759952741150630280027072309367",
"67798560869473787991836096505943938657",
"293063849637511809393079929879308870920",
"60868025283604828497507770241516026511",
"316101496242185011149504844475023188060",
"327385116183772555556892609729553838084",
"25993542901681363228103448556282356448",
"88779222788225485833135987196050145518",
"121252430777992313187053092789620136786",
"166139639681405711236907404979530853424",
"82086151705952952319004671623292993827",
"28534582690435240119481668726178642173",
"296329509394067490794504379337891739656",
"236382054928165744430328945096141308474",
"102848457580843853304081499946200665891",
"160926301823395272203032364052379009824",
"51437442035089939434765846634164895335",
"290424204741642406305780620074328148603",
"129406332293238226973409480705927750113",
"239719312426871224676059649646124104943",
"287850253523178824504836651060568508577",
"106407041626908380086849300779068286764",
"83903047201101156691471205013766354124",
"147368505749116439332856353156553901479",
"304434193914982378897694840813274857908",
"260914240444313346193160359359015330165",
"294813579052645604778415112353720478815",
"15034980889967464893913355281565525855",
"276947534017190069328474168649978218912",
"88472229963914885330735044526355717884",
"236653154863982037034140756566923575694",
"266770078540386532013832470981149683235",
"133165812289959363300353974906156417629",
"24226559388181954791727405006231224650",
"5628929680621331072188925703751994357",
"284045741761180643073933042565172860237",
"128394388559113858041345081622407433945",
"259615133524884354957931093939208947186",
"286018045188315721565500553549796814918",
"245064056268603013330732199995630527833",
"237826262322216501327423908041085055920",
"166324842491882547195818241029722272725",
"224335837364495042739647388256338140413",
"3732105203574160970382973397837029411",
"63607512868957988491072957906142496076",
"140586300643232882609753766977505686488",
"205514954356548733129575467993881225937",
"261866739227062738751925677953599714098",
"148230182605025364062132206111039596180",
"130508850230388109795992430615931374224",
"284045741761180643073933042565172860237",
"135223963743311472756161149600840909200",
"268705926758844303681260539298334005404",
"148973784053474583530651717549100201204",
"133452551759495127719145386103787866728",
"245105745889670721531841952857471962936",
"63607512868957988491072957906142496076",
"140586300643232882609753766977505686488",
"205514954356548733129575467993881225937",
"81811271681189923002551519047423646485",
"21971160843040463346210758250847086928",
"339159251225176175579834489604666802998",
"305406862547314280322063063527445566240",
"5628929680621331072188925703751994357",
"284045741761180643073933042565172860237",
"128394388559113858041345081622407433945",
"259615133524884354957931093939208947186",
"286018045188315721565500553549796814918",
"199035322676168247214473233730557684382",
"39576486532435656307126000471364659936",
"138781032069326478731895837592748098816",
"257434885896623129457787480373732355546",
"205514954356548733129575467993881225937",
"261866739227062738751925677953599714098",
"148230182605025364062132206111039596180",
"130508850230388109795992430615931374224",
"284045741761180643073933042565172860237",
"135223963743311472756161149600840909200",
"7040463713011471522836850781901071851",
"5549044782131787630943866436310956121",
"20009070510180823664865223243633948936",
"257434885896623129457787480373732355546",
"205514954356548733129575467993881225937",
"206911017234144836388372127328751065730"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-6c1cbcc9",
"target": {
"function": "TIFFWriteDirectorySec",
"file": "libtiff/tif_dirwrite.c"
},
"deprecated": false,
"digest": {
"function_hash": "159872699231524825657169283820265542956",
"length": 21123.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-6c6a6e8f",
"target": {
"function": "Ascii85Encode",
"file": "tools/tiff2ps.c"
},
"deprecated": false,
"digest": {
"function_hash": "232675373431726788527628878015370152042",
"length": 729.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-6ce01a61",
"target": {
"function": "_tiffSizeProc",
"file": "libtiff/tif_win32.c"
},
"deprecated": false,
"digest": {
"function_hash": "304188154670966709715161756124543590774",
"length": 135.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-6d08ae99",
"target": {
"function": "t2p_read_tiff_size",
"file": "tools/tiff2pdf.c"
},
"deprecated": false,
"digest": {
"function_hash": "195917799996032746800148236491859222972",
"length": 3564.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-6dcfd255",
"target": {
"function": "JBIGDecode",
"file": "libtiff/tif_jbig.c"
},
"deprecated": false,
"digest": {
"function_hash": "218171714700988782679905906931698775538",
"length": 1435.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-6e03b483",
"target": {
"function": "combineSeparateSamples24bits",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "28290456876422067232555505807005959812",
"length": 3280.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-71480fd4",
"target": {
"file": "libtiff/tiffiop.h"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"217825765296751473437645131909914926625",
"286460624061711261484631332310459292599",
"279228512335903500202089328180208423548",
"44844327966842414835719888266733167478",
"250652304182135442581363981126110308898"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-7192c116",
"target": {
"file": "tools/tiffset.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"250378350057766937960440446747955200030",
"266223856808092258641357239407086055395",
"267044220376704999031654447285999944513",
"286104509229004384967337383439159814503",
"164302806098840265012179604104019543496",
"311699004766911333943540301204404397853",
"58540016328285007955733754247352425768",
"143699240868786924100949406199885675898",
"295388348368350117695619875908578349953",
"280990321950011536352434910197210454177",
"190768422261230845076985325306778754140",
"166568534132219134103993455161989650515",
"280841448742752988338888448445638769054",
"5888824716622840112201832960951059673",
"248425806898613868744938849575493737308",
"262919227000835267199770757284350638098",
"334375049366444042823823237021808883310",
"73799875916683794036357164101279969708",
"55718183619788911417420576591282953737",
"87704305505411630896272678161680390827",
"277753348982089848604892548538504562232",
"115720796882237421891828478972224349348"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-71fcac4f",
"target": {
"function": "_tiffWriteProc",
"file": "libtiff/tif_win32.c"
},
"deprecated": false,
"digest": {
"function_hash": "72194083564779466256470398935958379520",
"length": 437.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-71ff7079",
"target": {
"function": "JPEGDecode",
"file": "libtiff/tif_jpeg.c"
},
"deprecated": false,
"digest": {
"function_hash": "101255608728752395576132183444153055280",
"length": 2129.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-720df615",
"target": {
"function": "test",
"file": "test/defer_strile_loading.c"
},
"deprecated": false,
"digest": {
"function_hash": "74341377285942673596475283910168094406",
"length": 5364.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-72b4901c",
"target": {
"function": "TIFFHashSetRehash",
"file": "libtiff/tif_hash_set.c"
},
"deprecated": false,
"digest": {
"function_hash": "6329711937787051306749541994989534333",
"length": 950.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-736941c8",
"target": {
"function": "combineSeparateSamples32bits",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "65370159711594663147257458590069755062",
"length": 3305.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-7404fc9a",
"target": {
"function": "LERCPostEncode",
"file": "libtiff/tif_lerc.c"
},
"deprecated": false,
"digest": {
"function_hash": "3297475801338182537835524040810712805",
"length": 9555.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-7470ee4d",
"target": {
"function": "OJPEGWriteStreamQTable",
"file": "libtiff/tif_ojpeg.c"
},
"deprecated": false,
"digest": {
"function_hash": "235987967716296873004503138926088369204",
"length": 377.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-74e3b22d",
"target": {
"function": "main",
"file": "contrib/dbs/tiff-bi.c"
},
"deprecated": false,
"digest": {
"function_hash": "11026194776139927535844949402744622833",
"length": 1396.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-7634533b",
"target": {
"function": "extractContigSamplesShifted16bits",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "245556899245844468503072790249816129632",
"length": 1842.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-766d45e5",
"target": {
"function": "extractContigSamples32bits",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "117706185305086783607871586873405343153",
"length": 2130.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-76eabded",
"target": {
"function": "TIFFDefaultTransferFunction",
"file": "libtiff/tif_aux.c"
},
"deprecated": false,
"digest": {
"function_hash": "171696317239867812528239671531979592775",
"length": 1136.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-7740dbe1",
"target": {
"file": "libtiff/tif_lzw.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"175625598724316078718610579659711357330",
"33772459513138045382196024153177148773",
"334149232092134761467002900015217489591",
"278075542442795496260822090815078358500",
"45898899283014983929280503723688554821",
"196909439622795726781805799522647089158",
"32401642200595532176815546456947711262",
"285285456316624687544310313874929038385",
"287165330529205478645978817050465810829",
"238644563513266626759459356468212476175",
"95676822700367017227093067274790714517",
"142486755223293811530216074140914852255",
"106687939915105015130984066495439606542",
"233484271340784489963982641159296197214",
"305222024141725521360463658355834399649",
"140619731356899837864728022485883062060",
"132262876523832664631609675029943639174",
"136513725375536671463303258125816016825",
"43826730730893144813706875806623048656",
"240661583024475210937332729504454995528",
"318294260126663642187386739813631162857",
"39315070480252488627556120672982855950",
"19290970161947802245702234687808969691",
"137176722911542267375506621451762756949",
"330531503869439539549506721203184706395",
"295273998364879495785903253323620558432",
"214261020540999133359369119378368075142",
"195709869988935624741395825068028686616",
"287165330529205478645978817050465810829",
"238644563513266626759459356468212476175",
"95676822700367017227093067274790714517",
"142486755223293811530216074140914852255",
"33736739401628325795870507596873196342",
"169091731768096671169703055946152099206",
"16585066452231630540864446876924996985",
"34724437838967455041160357939357164799",
"281151598589523437891699838770464061549",
"270074488176609749550889444329013612028",
"297834363381398182894028213401475981129",
"51936582184823183097331686266936781276",
"270787224035464960550055979159366480547",
"26619250518782136406572679320936776206",
"199607056233893654545129399682132628145",
"261749801873338223374772020405992125465",
"128901147420974961965470421558141451774",
"128443281645372671411934419555406815181",
"160831259623041419894831374652624365739",
"214050776829810172472052910209540712076",
"238471010183776548568655190179764599158",
"77219792793161273451985292915106577970",
"101461707119812571487169231709805114756",
"45317538670295410619576565180206379634",
"253063622277798319738227690178193580872",
"174458820457799409471184739879777563790",
"269652574929214002439721288092955974429"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-77d1aff2",
"target": {
"function": "convertHTMLcodes",
"file": "contrib/iptcutil/iptcutil.c"
},
"deprecated": false,
"digest": {
"function_hash": "230548756574003478140572421155744543868",
"length": 839.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-7849a716",
"target": {
"function": "t2p_tile_collapse_left",
"file": "tools/tiff2pdf.c"
},
"deprecated": false,
"digest": {
"function_hash": "83311338947096978188596204823276511989",
"length": 329.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-78fd3ff7",
"target": {
"file": "libtiff/tif_hash_set.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"93971171446005794526192344758920843643",
"248914831615814747411808481067276654439",
"19360406297335667648665750473868584532",
"338490717867863373943262000539955873342",
"21678754957647887020780260384672315948",
"185869086355551821232206198760772694223",
"187012315724476173341001167222262958145",
"281176669910296633934899146395569773034",
"215523134534019166936891009266011288665",
"333218589452701367366098732174990816484",
"242394511795686010746582472386845191687",
"145149435561427487269637522995685311179",
"127601366990225491175444663062484380565",
"319142701192908628917785818231180614765",
"212601845547741026290680471063899577423",
"284516765308263656892069662813400398959",
"300453518137303721256683778777251421034",
"87200905938452469436894876475813363560",
"117276257417434239995254922355725971312",
"267755834874385917547120809511470837313"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-7c79d00b",
"target": {
"function": "PSDataBW",
"file": "tools/tiff2ps.c"
},
"deprecated": false,
"digest": {
"function_hash": "321018329621260636450716695021374679771",
"length": 2081.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-7e1d58b4",
"target": {
"file": "tools/ppm2tiff.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"241870988724740700992783839898354437247",
"67678648765012358883899225235613138618",
"108820072659936473887401433055013903895",
"54707920443795542477197299008289782503",
"290589013759936421350698085218920613957",
"108630701483034841297038278654779043121",
"162251937247853829446995541551887063803",
"174400350980881931762441134441871206662",
"57248558322408199842487312344085721158",
"332955815015258235250109088339795585965",
"66967664313875575826250857642842308420",
"9405259037321125219691592570193525904",
"302588139527336260258140760244538124419",
"132451298615205227712700863548315111532",
"66415953372433913920066939587061390387",
"182781177047173161721400373131880051499",
"122055138436251799799914105387050171334",
"340205835483743883365995189662675284734",
"314051766236019540059312917155278833555",
"169248675183987776947758957773998718374"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-7e77609b",
"target": {
"function": "test_CheckpointDirectory",
"file": "test/test_IFD_enlargement.c"
},
"deprecated": false,
"digest": {
"function_hash": "317811455955899429974831366675504697396",
"length": 3955.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-7f387936",
"target": {
"function": "formatIPTC",
"file": "contrib/iptcutil/iptcutil.c"
},
"deprecated": false,
"digest": {
"function_hash": "324890940595352653022953177885164107421",
"length": 1937.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-7f3f9037",
"target": {
"function": "write_image_data",
"file": "test/test_IFD_enlargement.c"
},
"deprecated": false,
"digest": {
"function_hash": "179760999935730699365742767984491469597",
"length": 1842.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-800d91fc",
"target": {
"function": "LogLuvDecode24",
"file": "libtiff/tif_luv.c"
},
"deprecated": false,
"digest": {
"function_hash": "12878185078592304500929999951782456224",
"length": 1099.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-800fabe6",
"target": {
"function": "_TIFFFetchStrileValue",
"file": "libtiff/tif_dirread.c"
},
"deprecated": false,
"digest": {
"function_hash": "216925291317550967091832284506874436667",
"length": 2127.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-8188d511",
"target": {
"function": "main",
"file": "tools/tiffdither.c"
},
"deprecated": false,
"digest": {
"function_hash": "43121766100914870999769397122968481378",
"length": 2866.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-81e1b2d3",
"target": {
"file": "contrib/dbs/tiff-palette.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"308668567088347200640773467977279917934",
"60438028385240970683341410659522659853",
"113536595377599433987362128985687360441",
"202653520075316344370557908098720919579",
"138602538187295695209909834967361944051",
"227399477437828490954238632701908888807",
"107615923311050019223685844072933338821",
"8841595603090861707310878314719821113",
"241255735912656379492785138081841047102",
"312596435204483507223639086462561163248",
"163940551648249431698518789379546624031",
"199303543237240210587249074049726143056",
"88164301693851892258580557113409701923",
"337248845651764630347791252401114019893"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-821b6908",
"target": {
"file": "contrib/iptcutil/iptcutil.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"262343332690656463828108080430432331838",
"107716769087341617543359856247957980561",
"215619434375292078534660418688210959502",
"25934559133490498921679950375354796230",
"81777961790739182367055020336848791743",
"23489861411998510566454103758772334751",
"193466814084512314290968237313519299877",
"38515924829904836874381734749359733713",
"90347399178922609218651802768834994038",
"27200867793426549643275882751628425047",
"36346760896876680431226608935028715112",
"220807932309803038149291612626623691771",
"35626238592507263609223343983358502000",
"338802078935864261624742752581685211854",
"39492138960907650053019970573417176584",
"21695095982129277068579779032966560363",
"78393287412897224919737760102523625243",
"279143811348535851753155478630986287689",
"50629710252823644212797397071191857716",
"82749592732467130294175779846604618204",
"326951996106200123548235547717237090386",
"316817805255411993115991670823272419740",
"54897153364082374046550553195849858444",
"68666650731853211572498751737578520877",
"119654688979350872776124499929649375393",
"6383463204371818215001728685469783221",
"273693753626401934550010824300278906445",
"248100716628764391557776738161601069368",
"247890563319875237223913128023110461525",
"339022290225694346351549782551841998109",
"266328038519849359065952015276712678389",
"147615901126215549993353990959929830625",
"212377059533767706965656972908559747198",
"313648970953348862646940755749209862550",
"25150016393806590674959856606282246156",
"220238491259030314419044406588650930521",
"325503578191608384885925829048942482699",
"324994380971479266091052196218504009622",
"24846283573402707990515413695175772997",
"247039988197245070232934140245530241573",
"247598616716925948489305494233454461332",
"77117504433960979461903376885736905829",
"131961793938963035930435193985216522316",
"165947874620320485028030777883459977146",
"268839375337378657769427211954279776988",
"247877379828624010096924976578158643820",
"95872028792655185011245938558696692691",
"47568601140119995332363430737063006746",
"201232255969625661289640959190000171809",
"280289315323364744390020308189280179454"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-8221314b",
"target": {
"function": "writeBufferToContigTiles",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "244010593671594649657743224313168530167",
"length": 2404.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-825afedb",
"target": {
"function": "combineSeparateTileSamplesBytes",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "142915715741439392307359203106288320242",
"length": 1571.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-82d7db31",
"target": {
"function": "combineSeparateTileSamples8bits",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "258787708749469373592243238192709104718",
"length": 2433.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-82eecfc0",
"target": {
"function": "V2Code",
"file": "tools/rgb2ycbcr.c"
},
"deprecated": false,
"digest": {
"function_hash": "209640822661396236925986652371094593839",
"length": 232.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-8330702d",
"target": {
"file": "tools/tiffcp.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"319991784650778758423279881803859510811",
"217807025931054440740659475570497891533",
"138520201972851409571602618056972427433",
"338527725472765178087370733364455575934",
"249079090793812813191972551289976100266",
"330611455637827768034722617097903849523",
"105410813221623510936464580084364198931",
"15814265550478685313007383777179167286",
"6226433735613568448836634980754255736",
"224017888859188149425882653802326717188",
"329611649688935772381578262999546142466",
"83078028880754363145522749134780799035",
"39913074883274425388580718758891249198",
"241770488961796001967093756310351828794",
"121037424769914522987885398671335527096",
"213018209905550192925448875721437228321"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-8538a060",
"target": {
"function": "TIFFCIELabToRGBInit",
"file": "libtiff/tif_color.c"
},
"deprecated": false,
"digest": {
"function_hash": "185451838778029124731475274818671171541",
"length": 1231.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-85c842b7",
"target": {
"function": "main",
"file": "contrib/dbs/tiff-palette.c"
},
"deprecated": false,
"digest": {
"function_hash": "175260161999855267105922908331610353381",
"length": 5219.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-86452503",
"target": {
"function": "reverseSamples16bits",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "117388358864709676683309570742040178660",
"length": 1187.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-8674927a",
"target": {
"function": "TIFFGetConfiguredCODECs",
"file": "libtiff/tif_compress.c"
},
"deprecated": false,
"digest": {
"function_hash": "137668837929168665618922478244141571502",
"length": 905.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-88481403",
"target": {
"function": "psStart",
"file": "tools/tiff2ps.c"
},
"deprecated": false,
"digest": {
"function_hash": "37042926247922788897548709419903837951",
"length": 3103.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-88bb8af0",
"target": {
"function": "TIFFReadDirEntryArrayWithLimit",
"file": "libtiff/tif_dirread.c"
},
"deprecated": false,
"digest": {
"function_hash": "32702653178874682067492587520595050795",
"length": 2577.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-88cb2a6d",
"target": {
"function": "PixarLogMakeTables",
"file": "libtiff/tif_pixarlog.c"
},
"deprecated": false,
"digest": {
"function_hash": "25596736115121296654531012587477551167",
"length": 2483.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-8955ca34",
"target": {
"function": "TIFFAppendToStrip",
"file": "libtiff/tif_write.c"
},
"deprecated": false,
"digest": {
"function_hash": "207005713636745835400750895257558507666",
"length": 3165.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-898b894d",
"target": {
"function": "JPEGPreDecode",
"file": "libtiff/tif_jpeg.c"
},
"deprecated": false,
"digest": {
"function_hash": "49754187503206081748823052300392419671",
"length": 6906.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-8a71241e",
"target": {
"function": "test_arbitrary_directrory_loading",
"file": "test/test_directory.c"
},
"deprecated": false,
"digest": {
"function_hash": "315291069923548154447376169949109418009",
"length": 8089.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-8ad5f4bd",
"target": {
"function": "copyFaxFile",
"file": "tools/fax2tiff.c"
},
"deprecated": false,
"digest": {
"function_hash": "104738940124621779949770992317021165395",
"length": 1865.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-8b4ec16b",
"target": {
"function": "horizontalAccumulate11",
"file": "libtiff/tif_pixarlog.c"
},
"deprecated": false,
"digest": {
"function_hash": "298811804387743750028345161620552438198",
"length": 1352.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-8beb382e",
"target": {
"file": "libtiff/tif_jbig.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"162170469565612680598220057796309418604",
"46360572661831203590516900300527171640",
"311562248939582529363081266186934694919",
"93350952158716362958125440048578395284",
"270580857908506250054178159463054456979",
"180166135735293827283901522684773251671",
"28311665074248206333889268367300204190",
"122392312220753758323619903629597332142"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-8cb3b28f",
"target": {
"function": "LERCDecode",
"file": "libtiff/tif_lerc.c"
},
"deprecated": false,
"digest": {
"function_hash": "97557747124169234388882347615384498852",
"length": 779.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-8cd953e7",
"target": {
"file": "test/test_transferfunction_write_read.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"220819973125353281274097939276747169393",
"24182896700602693032325066617254778520",
"326129406687593569697483354003200404596",
"223332277389990069090801251113589153026",
"172622172986736078209554280862910828956",
"189204090256984942671600172453388003470",
"206843517867113978871000499128741176659",
"305216341967101476924078274543403463875"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-8d022002",
"target": {
"file": "libtiff/tif_getimage.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"183620057145057476949427235084482594044",
"227932936578009945074723876247194569388",
"200715862925609612932275149303680246922",
"238169194653539474371956290470894710410",
"26684027501535966108912238277986808454",
"89522098045919679107990458504105179274",
"84300861062861218342574343951402482086",
"8616478296040333635871780692579375993",
"225626877302502305829439391010517855479",
"161873279118535034515285796205740051331",
"243504239707646404162686313793894547049",
"124871893540382067746070418355669978953",
"86675102435332818060849482249348834549",
"5367879140479607491987659893088214919",
"250761287107180963215552900631573720834",
"257130746890249409367721498862690381144",
"249216736393177017311951075781180922462",
"92532957558504061841711923205982594204",
"27359683495485717177913081382074313266",
"2244451042491357355886003498006428738",
"245045674923196410693217331610723766090",
"94034497981246318832190154528484549190",
"334053713317765618759295656084668137188",
"12192758814946373541678818256296361339",
"264528431689955585305519193202105681160",
"1602518479957436467266043646041504943",
"272054126692813473468635417738865019516",
"140341287830197882079767111673801511323",
"232211175185710132470551527876187172825",
"209308422434695158648411334391105163690",
"114890305255662435196577103340937297213",
"245662057933547895680046110391137083483",
"266345973038164404176294421637991581162",
"76444175733404780914979980284420150223",
"35208851797691694621849124622829699480",
"337692658724204635419400490978213915763",
"323739349288316692062323414916187360694",
"273913445878729338908777744867783338111",
"303475267360958414503369415788697807534",
"92725937546426775435468246519411666610",
"266142807733812430496963727844764746267",
"301391419872559401373538943374872692929",
"175438695194857570826882496470460793534",
"15154705540358842987314289723159178153",
"122220532152956285103539751823934008626",
"319688986291569765261319568240262430641",
"32614040387962317163259817441027565919",
"70858913546408317214531037492994436833",
"113304933446256341704405373667042505760",
"303017661373601935904677182740069468445",
"336061856724218498603290329874321280103",
"307965349454434395197799849382796258540",
"75205276829854719857376311572249701697",
"208075405738354439515793437599181691438",
"41318567642760483741041560295155821916",
"250761287107180963215552900631573720834",
"257130746890249409367721498862690381144",
"249216736393177017311951075781180922462",
"92532957558504061841711923205982594204",
"27359683495485717177913081382074313266",
"2244451042491357355886003498006428738",
"245045674923196410693217331610723766090",
"94034497981246318832190154528484549190",
"334053713317765618759295656084668137188",
"12192758814946373541678818256296361339",
"264528431689955585305519193202105681160",
"1602518479957436467266043646041504943",
"272054126692813473468635417738865019516",
"140341287830197882079767111673801511323",
"232211175185710132470551527876187172825",
"209308422434695158648411334391105163690",
"114890305255662435196577103340937297213",
"245662057933547895680046110391137083483",
"266345973038164404176294421637991581162",
"12217217741900796914715321010208856000",
"71457794593348537815574662189159915742",
"323243343906765731310284805469781832267",
"81801646645867171133213033776053305331",
"337692658724204635419400490978213915763",
"323739349288316692062323414916187360694",
"93230802585896832251688601968989851775",
"118284700360621643131434615073093133034",
"248334636031214822540576804516921625369",
"66741165669437981789241410849913539792",
"156822978284172387571244491028641290003",
"224770858205668164093592982990952221738",
"85587664524916742995620130957359544695",
"184359616468606802633748243720606035083",
"330779658383267338987242884837030586948",
"83371016738649389145339277231341363678",
"323553243193739163112346723412171176176",
"329304509171439846610823501723679247560",
"143821888333726209282449555285174028643",
"156482980234606250525980852142390820063",
"30240843750085488913072706119844285264",
"123216564420697610689402907050212047555",
"306104890237075149859196052466928334604",
"233375081363252946758676071814914020780",
"301391419872559401373538943374872692929",
"177755951661734624716213261333688187386",
"95103340374508360421175058480096420145",
"257323578913799987031126581394150946760",
"243821719402165270983765421845474324822",
"32614040387962317163259817441027565919",
"70858913546408317214531037492994436833",
"113304933446256341704405373667042505760",
"303017661373601935904677182740069468445",
"336061856724218498603290329874321280103",
"307965349454434395197799849382796258540",
"75205276829854719857376311572249701697",
"10775035043314581153049763741914162847",
"167935819061478498471414343887227279031",
"109805122483303502097526262219319992471",
"88181971585339457401618830562665246702",
"281688695409049807095506949012137607338",
"255260520341263247342880544088360654835",
"313814097337712218329496998755739672547",
"41413230937865650522220358364141188558",
"336895843006850629051163185954462118485",
"266451467330375649850017865226386509841",
"332358826339331688103875319930043901534",
"70807983653146535439396300590479911675",
"50314255360075743381370618226419040168",
"149539599907652370831371391615603580541",
"311398654640369702848270174217637375160",
"222720226007109021392562424013992188122",
"43747109958017730001951032913865867932",
"335055123248748600498409573556097424624",
"232390112080550266351072681456527729521",
"60470578495234222263648927331158403002",
"323123251305475280314703365737774334386",
"37327156135769534840176230271447511596",
"138615305980669339667206346139696531202",
"320513678956400922182689260529212635207",
"256494799916388662654422458005356851721",
"136294045025908509378016453732729414072",
"279227057998096961506562610528081368407",
"18366608416071066705551162214657266399",
"4872152121779264395772083756966283597",
"92725937546426775435468246519411666610",
"266142807733812430496963727844764746267",
"113798769064057242727726679066856205689",
"280398428032829857871726799811655404935",
"4669604189182195032653761451677403578",
"230686590394385614316143625036104971606",
"215115992742594640428671647936910392961",
"22087078694691578370630019288160096731",
"52777653271913597260029624705163535570",
"126236885931789436303081787318982706218",
"167935819061478498471414343887227279031",
"109805122483303502097526262219319992471",
"88181971585339457401618830562665246702",
"281688695409049807095506949012137607338",
"255260520341263247342880544088360654835",
"313814097337712218329496998755739672547",
"41413230937865650522220358364141188558",
"113553156312744949879628213031745566345",
"248682060529049396249028404876751884869",
"332358826339331688103875319930043901534",
"70807983653146535439396300590479911675",
"50314255360075743381370618226419040168",
"149539599907652370831371391615603580541",
"311398654640369702848270174217637375160",
"222720226007109021392562424013992188122",
"172875730287234424410077777773799383979",
"212825707271628676084138136709400380935",
"141610770730456203091531416386695806055",
"160665169517912062099625588318188136349",
"24378997828204837639304227092086796615",
"27509670885236094073116161274235878487",
"265303113392058821100491236327691841869",
"309000481569530558466700165172717104959",
"204335753465071027427532293210966335282",
"237691867393175263938755444063367475744",
"219000260785946079156120204099206948446",
"257142759826743306783275013617179616081",
"263626418063072994432320387030314226879",
"167935819061478498471414343887227279031",
"229491060442648442320388511149161626491",
"6802553352624543855903710934229791228",
"24103602388890542269633725784070219229",
"37128392789894279004013189599690398952",
"258273321891808783394374664414536536850",
"192508523184486785633469516832725623850",
"101518158077731680803150405730163052917",
"333222033323250374878265390208543315503",
"311541248440098888204752649103812526303",
"249328015275627101537135139628184562773",
"248442127358683700174079284249412704081",
"173433456335317118452493092631943414299",
"206284018665766766276102568711702401438",
"105438486650187318740469950304704671369",
"192571307604164435071831544539521851015",
"231351681265047061227285834903401647925",
"39833962466333705473521814798610565745",
"296448586407853681266057368006932418840",
"136466724155871442756410012280266955576",
"163831603220069446385130869931686852645",
"77204559482622616505211901719941048096",
"83118624550511741725961565530674245870",
"10168227275192854131046483199332368126",
"190773102290014624780574556097464297551",
"90989136863313115773437883580754598806",
"238365070100947734306480923275270051539",
"300337228202470753416665444922872516675",
"5399699566733669076786154142091932120",
"313305837393680647676997957003408317098",
"27152604996488043626404337309122688598",
"48660626466371258625486797165336141948",
"62368746111118687546995846093143217048",
"204665167208107754736768005474953109093",
"93882373305958386732110290094336409469",
"178802984587326691130544554844475795678",
"313305837393680647676997957003408317098",
"163266741604541924621927893152311608744",
"321940965092546546496212985747046422230",
"322355719026220594316041047661647463770",
"288604349971916095454838402736091071694",
"93882373305958386732110290094336409469",
"298217476030034677277477394712514384597",
"152793971032786377641833291291204960733",
"174308737294226946027754098667533140073",
"1640607812735119696406112779545823510",
"158660865149530060386597489985956822495",
"262254300052388234208712214891658839614",
"298108238629768061568966022079849869966",
"325263343664350647319216335029881752918",
"296070922374176541778052202579740227914",
"161253445658460218393752207127722611494",
"192694046388423699051302446219930294281",
"102044864326189663704260882622956220136",
"94683630244030704029555718731377198483",
"115251312694267724350080886927677745676",
"88901418070470169076546024538879157070",
"81188787464695837903033914666693712311",
"324797056992621856301221992588307041827",
"227012129291810364826024323696788477209",
"121316718228278068996442887686110198364",
"311245389538066393502442934654486575005",
"278853716318358445058668307894982452047"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-8d83a3b6",
"target": {
"function": "test_IFD_enlargement",
"file": "test/test_IFD_enlargement.c"
},
"deprecated": false,
"digest": {
"function_hash": "337299039283772253108697324004099899875",
"length": 11033.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-8de1e359",
"target": {
"function": "write_test_tiff",
"file": "test/custom_dir_EXIF_231.c"
},
"deprecated": false,
"digest": {
"function_hash": "197255793294149276450633927046239959093",
"length": 33045.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-8e21d79d",
"target": {
"file": "tools/mkg3states.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"241700272738679037306851061918532771994",
"219115213433664791491555569356105299534",
"47086568499803377012000133015096103649",
"133545147236182744084656737706922753107"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-8f6e3ded",
"target": {
"function": "_tiffSeekProc",
"file": "libtiff/tif_win32.c"
},
"deprecated": false,
"digest": {
"function_hash": "258090245407477598327272193551049839529",
"length": 517.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-8fab0106",
"target": {
"file": "libtiff/tif_dirinfo.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"184172975949490865286005619743674751811",
"263971525808082804327464149189010214299",
"170767446517353654639890428250608315925",
"186086760343715660997119703289075554597",
"250614058438681608355433812124254633085",
"65603866902806405511350807361401923140",
"57815538588519500802461823237704980992",
"194791395258734851589342968295294371970",
"248146859766756492828181310229433926974",
"291951468711160430775461673648995555671",
"61556412149961674363205281458442854955",
"201735335445437629130301585822069870896",
"283965172738992871376436696294222503499",
"202687018677413366004956007250044586484",
"26846636871244291566812340161982061374",
"214370908978125707485121196673660482901",
"72361847238017140645624847928038915545"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-8ff9b47b",
"target": {
"function": "_TIFFMergeFields",
"file": "libtiff/tif_dirinfo.c"
},
"deprecated": false,
"digest": {
"function_hash": "97939173703672780371337629945783996244",
"length": 1004.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-90e095cc",
"target": {
"function": "TIFF_DownSample_Subsampled",
"file": "contrib/addtiffo/tif_overview.c"
},
"deprecated": false,
"digest": {
"function_hash": "233367365075420830827447883150331995765",
"length": 3019.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-91039624",
"target": {
"function": "LogL16Decode",
"file": "libtiff/tif_luv.c"
},
"deprecated": false,
"digest": {
"function_hash": "976867613621762726452206895939190422",
"length": 1513.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-919ad32b",
"target": {
"function": "TIFFVGetFieldDefaulted",
"file": "libtiff/tif_aux.c"
},
"deprecated": false,
"digest": {
"function_hash": "11766077891868200595648913494768400659",
"length": 4157.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-93258b8b",
"target": {
"function": "TIFFFillStrip",
"file": "libtiff/tif_read.c"
},
"deprecated": false,
"digest": {
"function_hash": "254153685793324065454118447511222823136",
"length": 2836.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-93aa0eda",
"target": {
"function": "LZMAPostEncode",
"file": "libtiff/tif_lzma.c"
},
"deprecated": false,
"digest": {
"function_hash": "268016638886167742666669174583123174765",
"length": 1255.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-94ae1afc",
"target": {
"function": "gtStripContig",
"file": "libtiff/tif_getimage.c"
},
"deprecated": false,
"digest": {
"function_hash": "88761802749054836094888626819227379519",
"length": 2583.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-94c30df9",
"target": {
"function": "TIFFInitLZMA",
"file": "libtiff/tif_lzma.c"
},
"deprecated": false,
"digest": {
"function_hash": "63276253761579497879441163315901856722",
"length": 2023.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-968629e6",
"target": {
"function": "TIFF_GetSourceSamples",
"file": "contrib/addtiffo/tif_overview.c"
},
"deprecated": false,
"digest": {
"function_hash": "163179960025966884186251586181816242481",
"length": 1049.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-992f2000",
"target": {
"function": "LERCEncode",
"file": "libtiff/tif_lerc.c"
},
"deprecated": false,
"digest": {
"function_hash": "198761252153931066381277131373903685056",
"length": 574.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-99441c46",
"target": {
"function": "main",
"file": "test/raw_decode.c"
},
"deprecated": false,
"digest": {
"function_hash": "38503244249158859036997705130987672703",
"length": 2717.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-99aff64f",
"target": {
"function": "PrintIntDiff",
"file": "tools/tiffcmp.c"
},
"deprecated": false,
"digest": {
"function_hash": "207330031950345416601342776095555203860",
"length": 1372.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-9a3c7a78",
"target": {
"function": "LogL16InitState",
"file": "libtiff/tif_luv.c"
},
"deprecated": false,
"digest": {
"function_hash": "204028457296127026961822113686731967253",
"length": 1467.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-9c467fa3",
"target": {
"function": "setupLuma",
"file": "tools/rgb2ycbcr.c"
},
"deprecated": false,
"digest": {
"function_hash": "263765770795564458223213835615212604362",
"length": 201.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-9db7ec62",
"target": {
"file": "libtiff/tif_lerc.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"237498458727162177126760977396666063673",
"282600169178089673282929979814083345415",
"95113717420127526625611930315890807372",
"197269500456969413787689213213708985130",
"227419374973706229904388484587804964795",
"280129348217634723474285645150408690091",
"148920908478431061634123967037872189647",
"85146876270965718044736755555607474253",
"333396949370986106614969815234583292658",
"67618423605050604095298999184221979246",
"185720689667319027007957308850506150946",
"131038737725146426450339077065216642136",
"2956774884802431162870760606539534471",
"268072132226000450331761015999896068432",
"33196356987779126698785130731744620030",
"89725581178447533942830755467760383227",
"100517357373616482768541302816396779722",
"264787405978430092864567731846057836739",
"6714766850324119322689168860606378642",
"137025395861331843467228037241025309607",
"30156392381328367018256464332303305875",
"199315459885386146055006268715586810235",
"23832578871780485430825247650138979132",
"145832956890141747696190521325944878100",
"23496003132088637413383272869481618561",
"261948434673436479779953668204910306233",
"187128465704153291436692931223087104319",
"185306003252823325988917029373780079835",
"190402784261072137567758840570009785187",
"124287648178035014351709917027733464262",
"291038268720812624543231628840230053938",
"120248659668909048759132862708980578701",
"31148891818287670160836743922379705022",
"246499495676379567851982913310024107795",
"189761460590206639474818369109253681028",
"273339736357046961291126138927542300801",
"248792338297031601603889929145057701171",
"222454667178459498913372278681143829040",
"124287648178035014351709917027733464262",
"308305975039491130296729745439360183945",
"159712561037777441926674418609447036913",
"16798166369866623703237645544641177583",
"180191452950358573738119255980867231287",
"136370105116856412257514815168156429709",
"77317667044039275760967684667133880337",
"330794636821370792228514368438455001931",
"312500453184394749038733695022718990722",
"222454667178459498913372278681143829040",
"105973015975879154908548590609676705275",
"291717160771486601900135300942526007928",
"131384776987312148152938519736586401392",
"4416255905309490289580603066218275958",
"75638969263832110333849449146402159079",
"139478938891984564390154808854013528863",
"197823356672340697872851631842667609270",
"4155233627569278115077790083756616278",
"163074773008840726484037629569366022475",
"321511126684919419699512847009716538360",
"106028807804419671968453217062486569006",
"134618286580495616895215664069276520213",
"172418172447460194974549646861823213298",
"293172802309480504137573571050950162714",
"47309616056662327561658398854633053220",
"198331670729529199010507226057576243509",
"242634881877797757167486096167769020445",
"7626365739111815439882459707491800863",
"93159759450269727234020189451790458469",
"12515167497826181758597325562949512158",
"208202759673289316510192322467367033136",
"190864159099499012731357402363679564238",
"185529527820342281635356656901931366725",
"261397737108036683858370359559015942022",
"238483650565673213272615893149764175594",
"12515167497826181758597325562949512158",
"208202759673289316510192322467367033136",
"190864159099499012731357402363679564238",
"7466876143231663344157819242630469380",
"251653032671605285496975333451223631349",
"209171125443640891682763909763103197115",
"25059427788757893803414349786429384235",
"136275981197056207366366900227098848929",
"188473722639889775183160068743779713469",
"291706553082012520063901410442753125498",
"282178806724585256393346622662218039748",
"325269429776174651526782161475494793200",
"185066825417491707088118287552971180350",
"2531755902358581699893181760016412750",
"237001144973695273447734046304723132722",
"189249073653800445973141910088838952327",
"123076895263106304089191144124829607252",
"66456463526185386560193051030631948757",
"269432974326248221485617178829271043613",
"255185819465846718803698420120782553363",
"326870255987225430943106142323488494451",
"22740182983342503474419853918736065996",
"71092438533329346564850055218840968299",
"269485219580650264965176507852569273444",
"252875290835773619634580831933438739505",
"251442791958054990102751990217616088198",
"222744017685621555626374373974838957805",
"152307467517294294873065987184185986683",
"43336395203938543672560508029057902085",
"281005814865390666395079396464686880162"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-a0ba4cda",
"target": {
"function": "combineSeparateTileSamples32bits",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "123121436181838631904219730624674944548",
"length": 3341.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-a1277a47",
"target": {
"function": "combineSeparateSamples16bits",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "165034733097944407786772681708984839184",
"length": 2611.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-a16998c3",
"target": {
"function": "testRGBAImageReadWithOffsets",
"file": "test/test_RGBAImage.c"
},
"deprecated": false,
"digest": {
"function_hash": "327517954919569636067153342160398636346",
"length": 1291.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-a2404c52",
"target": {
"function": "compresssep",
"file": "tools/tiff2bw.c"
},
"deprecated": false,
"digest": {
"function_hash": "165303021324524836031326819847175796024",
"length": 323.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-a374e3b4",
"target": {
"function": "main",
"file": "test/strip_rw.c"
},
"deprecated": false,
"digest": {
"function_hash": "56501117191807857351017118492360043523",
"length": 2377.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-a4225add",
"target": {
"file": "tools/tiff2bw.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"162900884118269071973443274818132193331",
"209916106423045617751956953423723447440",
"164645112535614899040516904222377585389",
"225206395383792150124309067460190306572",
"57248558322408199842487312344085721158",
"332955815015258235250109088339795585965",
"66967664313875575826250857642842308420",
"250284038528655829217529092975640470178"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-a543692e",
"target": {
"file": "tools/tiff2rgba.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"57248558322408199842487312344085721158",
"332955815015258235250109088339795585965",
"129825565699258770349389150565217198559",
"337570094648019184253551616824405210040",
"78990435176026809784910295774922339610",
"121258911485129503700507921852957287968",
"110152634116623705567075243466807846385",
"5947863573019168261670342916692778697",
"110322498223968089174888618695514985973",
"325857458810768532415118443459428198547",
"24821438275767204273243216471775659041",
"42745455596616451334712066214607448262",
"128342161649290263434610920921373744094",
"152998283045039495445408125010302845218",
"86124641640377184630107399091950253627",
"194132749737858535359803015754077042058",
"16036255474909234382727263691343385683",
"297592402389091367685562815272601648420",
"198242962823386666459924693559071089014",
"303303894507224528990001722619903593646",
"338728716164758801856607331221681535330",
"249729949436326549865860259452614230344",
"124955652852656288317505704660153768819",
"98948577127246234580887244121711151570",
"264325480487772489388031921511063879343",
"184915120920390725286470613729381809448",
"228974793104236673484553311738191173250",
"191612532053162798839638044545988074979",
"325857458810768532415118443459428198547",
"145425603135721170763467631737421008804",
"282402670004258469226683744131123272818",
"225328727262596037115873934588971580319"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-a571c62b",
"target": {
"function": "main",
"file": "contrib/dbs/tiff-rgb.c"
},
"deprecated": false,
"digest": {
"function_hash": "163839020845379293211993870015749101312",
"length": 4558.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-a5e48198",
"target": {
"function": "process_command_opts",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "335946155211490665193429117539344142227",
"length": 15780.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-a6a4adba",
"target": {
"function": "OJPEGWriteStreamSof",
"file": "libtiff/tif_ojpeg.c"
},
"deprecated": false,
"digest": {
"function_hash": "100773127825332452519903815956813819539",
"length": 1278.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-a70e4b18",
"target": {
"function": "rotateContigSamples8bits",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "212226816722808045595743945963319492422",
"length": 1345.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-a7e528c4",
"target": {
"function": "DECLAREContigPutFunc",
"file": "libtiff/tif_getimage.c"
},
"deprecated": false,
"digest": {
"function_hash": "15211136840367686465621574163770318848",
"length": 1428.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-a84e04e9",
"target": {
"function": "LERCVSetField",
"file": "libtiff/tif_lerc.c"
},
"deprecated": false,
"digest": {
"function_hash": "90134553695305065514581182167207326980",
"length": 2468.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-a9092c51",
"target": {
"file": "libtiff/tif_strip.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"73278553328442928583305939798559905502",
"255237112887765218074307295250330414886",
"11488543238109676339370173589450351061",
"89977133943652960957482198270185187233",
"150451044743943669630543913758832468540",
"169650308613209346805519492282419282320",
"29968990761355829316402782714720380343",
"55891678853966702228700209324115514289"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-a91f9cd4",
"target": {
"function": "Fax3Encode2DRow",
"file": "libtiff/tif_fax3.c"
},
"deprecated": false,
"digest": {
"function_hash": "196061600594695223271567741237331003186",
"length": 1516.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-a920c7aa",
"target": {
"function": "get_subimage_count",
"file": "tools/tiff2ps.c"
},
"deprecated": false,
"digest": {
"function_hash": "99779753272811530360561510459342809142",
"length": 2114.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-a9402d0d",
"target": {
"function": "OJPEGWriteStreamSos",
"file": "libtiff/tif_ojpeg.c"
},
"deprecated": false,
"digest": {
"function_hash": "225573255776174812580544427569270924319",
"length": 1148.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-a966d3ce",
"target": {
"function": "TIFF2PS",
"file": "tools/tiff2ps.c"
},
"deprecated": false,
"digest": {
"function_hash": "115114699049994319452759315520455550446",
"length": 3390.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-a9e2c3e9",
"target": {
"function": "swapBytesInScanline",
"file": "tools/raw2tiff.c"
},
"deprecated": false,
"digest": {
"function_hash": "150438201922612731977127254422876950573",
"length": 630.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-a9e50bd8",
"target": {
"function": "main",
"file": "tools/tiffgt.c"
},
"deprecated": false,
"digest": {
"function_hash": "90923695909218030230242494670192882456",
"length": 2158.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-aa06656c",
"target": {
"function": "pack_bytes",
"file": "tools/ppm2tiff.c"
},
"deprecated": false,
"digest": {
"function_hash": "198312776279975602305741836894060187556",
"length": 464.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-abe246de",
"target": {
"function": "_XTIFFDefaultDirectory",
"file": "test/rational_precision2double.c"
},
"deprecated": false,
"digest": {
"function_hash": "26113990510782275006295877217238589694",
"length": 216.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-ac1e03c2",
"target": {
"function": "LogLuvInitState",
"file": "libtiff/tif_luv.c"
},
"deprecated": false,
"digest": {
"function_hash": "339970415190631567902128735638813901841",
"length": 1536.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-ad735793",
"target": {
"file": "libtiff/tif_write.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"166610828330890833260688581457879687036",
"124188381603503960422599470818883014491",
"54920453331525911511914834233564704316",
"159893881620055746262627771612644374694",
"69355437075589483025253008462594562686",
"318127564055865626815354287823370604067",
"295139474955717664704352760331698785105",
"249482347866095256031870129822493102245",
"174924683451332738353450581718298845358",
"180141987147912416009005065285812527800",
"938533231857010022936557474447099644",
"50972099496524466523406328559641308937",
"4422621604701655654620700161556196410",
"80168570994185258724289809480364405147",
"185031603769396573993422624665318583668",
"98732850469953083784857464136372906514",
"326273941434504706639995706207587051505",
"61048199746488140835400479884662253166",
"49059600204034210269657390333939415533",
"240620462366702124071416618983574380321",
"268711350686611145515698472510291166333",
"202198261100731109056717884258982760478",
"318699593411596757575981517079266401586",
"24772506193404516947693118219206019927",
"242950882550223415712687881776231808417"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-ae823fd3",
"target": {
"function": "TIFFFillStripPartial",
"file": "libtiff/tif_read.c"
},
"deprecated": false,
"digest": {
"function_hash": "212789466006712774256298866562674744942",
"length": 2565.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-af96360a",
"target": {
"function": "quant_fsdither",
"file": "tools/tiffmedian.c"
},
"deprecated": false,
"digest": {
"function_hash": "136290775670108430726966536347321584622",
"length": 2561.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-afb6f7e8",
"target": {
"function": "setupStepTables",
"file": "tools/thumbnail.c"
},
"deprecated": false,
"digest": {
"function_hash": "271185582500240449693267468751041788740",
"length": 675.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-aff2f3c6",
"target": {
"file": "tools/tiff2ps.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"60873136838961388317491298198350140612",
"141149897948717220189680180857690759009",
"105257577809524914438963822719848561163",
"165236791343347653359141460121003475623",
"141912229249238001618508768005542367775",
"276956950382044313388628624448280866528",
"249838403955433921845186180867610893675",
"279305034829745237213013066993434603586",
"104894873533942194568118094601725354188",
"6178996612337551487949384990121356577",
"67606717774098506507282448421804304022",
"212519121315004196120827869735844092437",
"273406991063264006588592371349284599291",
"301271207447869638388385541580303554327",
"292225773300593564697649675432753238241",
"40084278072941375493122237803108454099",
"112751914252938140523051450735898671791",
"284032353986529043113460734610543693158",
"67915116213880131835494094744755446684",
"307984389994872064345179324202745087213",
"208621329341119272952011131323176856994",
"327014686042595097339287731598157794217",
"67915116213880131835494094744755446684",
"30831776768744084353923545593158882962",
"283110193481317279391400075196398699023",
"86666592235233368824763079262872031567",
"171487730602910465531652800222790385736",
"190384966163763576030973002915055005447",
"251278777034896596040678312386289300832",
"24992055805653614026481879947215383713",
"171487730602910465531652800222790385736",
"258265760109653277004327892376412128818",
"16106101423371398851687575786511175020",
"206839614953160702545149091191132484373",
"247547825177874411626928132853663610859",
"333300071354596924027394006453307196253",
"183469058594332347711726752651095713395",
"206839614953160702545149091191132484373",
"247547825177874411626928132853663610859",
"52099239944394189692996909314228294591",
"127991970945127942919904556777589032797",
"184384688990158708525598592739998959942",
"171794164890601628599986002117117017639",
"35181317204470724706529803327049072373",
"304607401111863203864284976989748564395",
"239619661649029597075431325849630665311",
"100979306287993665491016999010160814950",
"132364954154910732292195305465667848590",
"158755402660179527016629774979254913598",
"279626855959534473288441968471242647065",
"31729264974695067589737695359271578005",
"132359194566129091129206324385250374891",
"290333838413676964887220141004768776820",
"285534022781313757779583045018542146867",
"168609937227603959190956630953857457451",
"186275263438780805559964569610462531110",
"184384688990158708525598592739998959942",
"247009615026658571298240212727960858739",
"238085823912802870812522804895398547340",
"208677023963194600090414511393896623431",
"320843486803757825636699998153655639291",
"284546523154591714486618259279449260575",
"163493685028385766975936567119171013102",
"28610258537871569996530281386790533894",
"158755402660179527016629774979254913598",
"153195753900070327280746358735331903874",
"321720920344257379260711474417650745195",
"263054433719956996932563862697340704181",
"8311249553596771787354361280856071610",
"297381733612072592831669818079236874994",
"2982908931390098816352247855317980494",
"218214417792928581976389450648125377714",
"154805042585903708770888063775784514679",
"326007311345547300477966422972053063292",
"299924089680436555827225201175736996422",
"268980237927512191747418192730422375942",
"263054433719956996932563862697340704181",
"8311249553596771787354361280856071610",
"297381733612072592831669818079236874994",
"2982908931390098816352247855317980494",
"126273550591595726419118804155576412261",
"131934239208100622921488132000918931486",
"120846083681727317707278496407887049510",
"337060791410513788569102053305746527257",
"146848692681246833985923849356880184996",
"18121116130321896829378508111125031076",
"218509269003470538672407615067603265637",
"303842734425020537007702177180837503060",
"22166603915568193810509268864142735093",
"234213690237191041423375760629052362009",
"295891302510326972033648565418543933319",
"172774837982759440566484474769771677639",
"138382021701393191811363859894360954742",
"96027867630062831096001685943295126076",
"162476345455033250205333424765759811369",
"74658427910157556368952812503024567147",
"267343926010267898141899337081026211909",
"68756498789591256472926037935007851280",
"155070578191645732873665967997132911262",
"88532455864345428044126974040217471931",
"131558651189081723532142428128739319518",
"148782020911526813387146468196982172787",
"169539831123130021028887620629052705176",
"23471757825190281341697400951576980159",
"252765288076845365016179469337517402597",
"269991825538043169204717417424777003168",
"78698108747923615400747415849021140635",
"309485120371632424873007009105682925066",
"223576828171259739868547968290136268082",
"69844120397634276909152205616622421585",
"269047544860461331561841094756278792770",
"164278555691694155930233292094154024621",
"22941864225459214995038499654727200674",
"330571955051771161434618916550235505020",
"158910508290314227469130272730891603011",
"106119912602178009427532299747679933253",
"111871745577327425170239135221845176744",
"160726516114299478873801385221653737770",
"252368873709552230955444434174685408950",
"224154836190518122052718498516305904665",
"242315521587767555237872820539389675321",
"165835280819141053585966256777569134166",
"182536121075351010677306025091198306456",
"65287607247172989948626193677355350740",
"190021213788783421250303595655841400578",
"170687383824293584089904553828231890052",
"250601566897499200463559902007597869044",
"236307622675794061554180133042645190986",
"306308388866995432696574536518360488441",
"41181318074239133798401055904961295227",
"111890837504876492806278517318978565890",
"219901768543079391032172157420419217692",
"170639027872899156247982222930993887538",
"153682705408120456285302576721872495915",
"4685842552869500360138377418824194907",
"66783751242242795362115311451130142492",
"238372967265606725553084476451390605298",
"233554667468998386585577462701716254888",
"120307353892226583528845684668278785494",
"242655141229342939048888780856470789504",
"336028651536706896202482261952281864489",
"23699878067443354699774033171377282663",
"128939545336199655127882121666535398868",
"281608634628420805043909447367443646570",
"301560365537367604041117635867846842641",
"149844000202830305978449458647517396626",
"204898772928593097248106720939412073445",
"4339961023503604685768407433721191954",
"303671749367828862002434986665680239861",
"268469075404226183605055338583556740967",
"322072331092645637952795091311877675463",
"279442627192224176423893923027427259389",
"335546225841398290795078550079112543992",
"285287969030604335597496452736414520578",
"51958119791353006762080110550882219315",
"63939701660444987003158900847350589195",
"295446703467782354403466518518239547193",
"101400066022348842185931939954348556496",
"266768017079315282438986279134220450027",
"329125016191719201183682280883460687030",
"182553931563513647142440665830663797566"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-b171a493",
"target": {
"function": "writeSelections",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "185904408372281665402354731631036636977",
"length": 2457.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-b263a0a8",
"target": {
"file": "tools/fax2ps.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"265201217262299263920589621600332631262",
"98608717255899827171121404940648255731",
"235496170210920673630470430476986126861",
"229799692562716551639561163895314996722",
"109459580956254795068225970803225954947",
"334978828459483794949218950692413596717",
"274039215345307904158361427102716501398",
"217872122450273663757206539483363791020",
"186939641900879647122474746303406706331",
"284850146872325454707584713971994112658",
"262575541299910786611261555299456976166",
"334960694329337196693818121290782585462",
"35698645802215409197087069268535671846",
"130682062135169660944678573770492365881",
"258396725866591227712671641281582391036",
"21226780633576480217637522573765315348",
"213990191166550072263540790401574783931",
"103863207891500768140176296028854973675",
"139657978826699503997164842631665587779",
"297344533559889906468877905120200539669",
"243433651476998239408667543189001932457",
"138370475044901585932579850644518164740",
"174447062485155572352075751721363035966",
"309855087945376285552121249478718155596",
"130960093348621348654062576693252754139",
"307231299718481162753230672992569901954",
"148439706693939397402305383600213772490",
"51273374077141337158682342437966049868",
"325977940495121141037185349674832210876",
"310095337624982710156157450125543963056",
"141616679350903602421161770195782899044"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-b2a6ac9c",
"target": {
"function": "TIFFVTileSize64",
"file": "libtiff/tif_tile.c"
},
"deprecated": false,
"digest": {
"function_hash": "269592484392240494300687502180555734690",
"length": 1156.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-b3951eac",
"target": {
"function": "makecmap",
"file": "libtiff/tif_getimage.c"
},
"deprecated": false,
"digest": {
"function_hash": "239825304897393220356294214042397235479",
"length": 1278.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-b39b7016",
"target": {
"file": "libtiff/tif_lzma.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"332022895654927327776711380343782747053",
"241703011551179112071788130097010667315",
"23656397091084036448398003363873845436",
"305574875981301283222996471260342654747",
"287951300318542370026683874123208237028",
"154082427212515298796398799108458605079",
"193290200956564046655865140477694346845",
"282013399347028709753742813381938138813",
"81062175155430841291181719323953720619",
"261571096228547141304796814680436048025",
"218310833934458984224400269121007453349",
"165319002236748240390718897242251168833",
"200440003036011825580484369260639091990",
"83037622398189546937250342616946286706",
"193048487300967517688196783952206046605",
"147066584709422614108817284042865920892"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-b5695696",
"target": {
"function": "dump",
"file": "tools/tiffdump.c"
},
"deprecated": false,
"digest": {
"function_hash": "23404611782266653948722319810652033589",
"length": 2839.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-b5bb6c9e",
"target": {
"function": "get_dir_offsets",
"file": "test/test_directory.c"
},
"deprecated": false,
"digest": {
"function_hash": "127549098566568665645227132943395832683",
"length": 919.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-b5be1033",
"target": {
"function": "raster_reshape",
"file": "tools/tiffgt.c"
},
"deprecated": false,
"digest": {
"function_hash": "252359439695955553099414166569297926998",
"length": 386.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-b6a97bee",
"target": {
"function": "processG3Options",
"file": "tools/tiffdither.c"
},
"deprecated": false,
"digest": {
"function_hash": "94667696821129650266849951814425776902",
"length": 433.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-b6dab1a2",
"target": {
"function": "EvaluateIFDdatasizeReading",
"file": "libtiff/tif_dirread.c"
},
"deprecated": false,
"digest": {
"function_hash": "11458825916100297884590338501912438108",
"length": 1339.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-b718cc35",
"target": {
"file": "test/test_append_to_strip.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"312879031396024794190258423547883347799",
"4815763807381623965086538024844665388",
"288950228573703625748441463178276106181",
"41144996895213111356049740625925736194",
"179490974342391827675802968578228416186",
"293642265697449143333391761770733643142",
"28835537158528813053189772814190841250",
"198969034434054482774974470500368174262"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-b8428994",
"target": {
"function": "checkTag",
"file": "tools/tiffcmp.c"
},
"deprecated": false,
"digest": {
"function_hash": "296256639425672808502585370876094517187",
"length": 482.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-b8acac63",
"target": {
"file": "test/strip.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"224684802350917921580457481318220723151",
"157862999360584849454825696258472796716",
"289381845491199732993839082198408361340",
"270191865652596620004786727810655119459"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-b96e64bf",
"target": {
"function": "LZMAVSetField",
"file": "libtiff/tif_lzma.c"
},
"deprecated": false,
"digest": {
"function_hash": "65655853965084057450264973413540470219",
"length": 598.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-b9f1c3f9",
"target": {
"function": "extractContigSamplesShifted8bits",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "146559038578421455374214071463346107509",
"length": 1727.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-ba252c4f",
"target": {
"function": "write_basic_IFD_data",
"file": "test/test_transferfunction_write_read.c"
},
"deprecated": false,
"digest": {
"function_hash": "132969740458888048941538498124353212107",
"length": 2982.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-ba41fb2d",
"target": {
"function": "LogLuv32fromXYZ",
"file": "libtiff/tif_luv.c"
},
"deprecated": false,
"digest": {
"function_hash": "72993765658228684847024451594656960562",
"length": 603.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-bbc7f76a",
"target": {
"function": "ContigCompare",
"file": "tools/tiffcmp.c"
},
"deprecated": false,
"digest": {
"function_hash": "137362310244110587762250316710468340999",
"length": 1924.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-bbca4604",
"target": {
"function": "FillTable",
"file": "tools/mkg3states.c"
},
"deprecated": false,
"digest": {
"function_hash": "279078490381269304898392248542452882246",
"length": 436.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-bc11976d",
"target": {
"function": "t2p_compose_pdf_page",
"file": "tools/tiff2pdf.c"
},
"deprecated": false,
"digest": {
"function_hash": "142185953161670666069851507723933287893",
"length": 7684.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-bc29ae40",
"target": {
"file": "libtiff/tif_jpeg.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"224822456729126789487492914733893658836",
"51455266781598658705635652770131626621",
"196883182844912424014280779093805265678",
"177803961130304273497838175896370278061",
"226088030451258778196106875489088551342",
"175036021013301506683967636117981705218",
"183568872234416314920660062876739499879",
"201188429516604414749934080269239898090",
"275522838985162572281954418824255229941",
"290076812568018956748032607749212467681",
"74277457234625409473264592478568587972",
"155044827281248952201600263152034500754",
"199738853448660450396075738055120358435",
"117919982184440652014786850741448905729",
"50770373451480463535731408368625155159",
"23668877368668359927252793203566178211",
"209842426893215359380917410241228809438",
"139084054352822777731298934127429257113",
"304103870120141635711373933442939782591",
"141774755081683614148394730786950721817",
"115411877821799835077724787073406684298",
"39460466567516970267693194668070579828",
"234735155040345735710557627878197550889",
"288727201126615501210044346252958250618",
"316222198528312867647864853959037355520",
"229242179468552550124682282958341417782",
"23734294956356779998593161271151525648",
"15047416002066620493569151491231857178",
"126412391473472901387095874155097889100",
"67358465562119648568160091735503449587",
"58647584886160580458365345831871132344",
"101339183927170063267776805623038077543",
"188118227810871879062258127568564744169",
"49083712230902389653250404443561156801",
"62069488874835078158814726372032843106",
"7774340248071659072275441459879253341",
"112896865928940367934741819500460405409",
"59115625616364526540605403789861834941",
"224022348296540262867200630095504954386",
"209842426893215359380917410241228809438",
"139084054352822777731298934127429257113",
"304103870120141635711373933442939782591",
"295902714994540126903080957888357023837",
"331283332239848714492797250343294687556",
"258056876891857627146570144409856111935",
"321914980342788368752263701998843907913",
"181091133895958038202887107723709070279",
"133749158338545269672979259686871707191",
"46735363025510148181104615735501969988",
"287602854184428436675386935260379875359",
"220523013653474327928946771200184170515",
"38326582998145893017940744631362261854",
"30652691594046746912356556344380727772",
"40461083881114260403874009894162556112",
"333074141710635353878506192750459148821",
"238208212627095236178057797125725961511",
"309819908873231474106872171329636273881",
"23734294956356779998593161271151525648",
"15047416002066620493569151491231857178",
"126412391473472901387095874155097889100",
"42142556415361132216843948001953597616",
"279867109343122602721085652697394807193",
"241895108152939369660368496719909075558",
"332411486827557466789188526783135151725",
"55768100982603631836596205966663926304",
"138731113153759371057001229342988877469",
"313112969715532571755486959236296068131",
"87848212008802439469397153933719180147",
"123294869868209945623000417811839917000",
"40045427630423473539014725636645326520",
"31175187084744913174515619714103657299",
"170924418336162980301804451759306227773",
"42742589185787482676858537695070482283"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-bc869676",
"target": {
"file": "libtiff/tif_fax3.h"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"290506961389679946399862487881101951767",
"292962428093508204123985651733014365289",
"163730628160582414219948968370270408805",
"64773783218476767209954968158207696247",
"232841196037306227786339589280301060904",
"270443604463908811733649559531144311177",
"69051121663053754114228760916608950268",
"160240462335764861849164996214932360909",
"163086978591769966234604547887733949650",
"257729652560704721510974613697633784867",
"268900249271101383143526281783297666167",
"11430003776763144026622461199336976106",
"99984841491959493727122411346451051543",
"80464759194657978322664509793986518496",
"265415093540108040463896606086408745037",
"195111970255111245584914874685642033107",
"227755747732705109736676650764874096678",
"185950787231326831482929248860077235469",
"249886354606230275959290343379027926759",
"276251667013282915412924570646964688754",
"77825763337073270189665641182099970435",
"249110627844246983680709356801341519995",
"299037905401333163515983407011098997754",
"160587608193771393349519667062100336292",
"274942887783328318938072261333763680192",
"141606117376894894519589895319000361723",
"311663320180656173298582318203592306983",
"227427915216024548095669656996518694262",
"77463394024177407035495544687093476518",
"265890895489129486090908880345693160323",
"97808530884532068363271788198100016625",
"165958452383140424622371852320495591460",
"189299872700968131269257342920465680846",
"274942887783328318938072261333763680192",
"141606117376894894519589895319000361723",
"274122334046658044187325073912238894609",
"48635714890376422150765134345406111242",
"219563309773292099441057230709656714570",
"168755719294837259452647380262147488049",
"146052629209276543024660670431922683516",
"54304947421103334020852321156956313640",
"138570678316776902597370614702704788434",
"94454388906222645714515868226823440354",
"84931987744208129744603266160229814402",
"239122211864200769329247093786804084914",
"208536688253905716635442462964380967560",
"47590399294777140348935882603921311433",
"40907651394745916555816477182751951739",
"156425473456618420865016141681854360078",
"158483440197402416835259433583539455560",
"206631427574357077121713777783674531404",
"52059956013023704273276297852064163360",
"77804125996679236061718876563591299225",
"36091512476254553312663896720235212241",
"259654937261741449432601067346685280767",
"70886898618203244179932896520463288481",
"263003052130424484309635969376517553306",
"20838448635068335178762783806797275872",
"255170741685762267404018028484645022749",
"115258257484540350801790617700200377522",
"189299872700968131269257342920465680846",
"274942887783328318938072261333763680192",
"141606117376894894519589895319000361723",
"230064242894894278170924409889217364374",
"323695758316903269053528343781100097089",
"160587608193771393349519667062100336292",
"274942887783328318938072261333763680192",
"141606117376894894519589895319000361723",
"294106797297866284621897380703917241178",
"137055554472250895324290613023772089439",
"160587608193771393349519667062100336292",
"274942887783328318938072261333763680192",
"141606117376894894519589895319000361723",
"294106797297866284621897380703917241178",
"159366411616294991199610086022853068094",
"189299872700968131269257342920465680846",
"274942887783328318938072261333763680192",
"141606117376894894519589895319000361723",
"230064242894894278170924409889217364374",
"77804125996679236061718876563591299225",
"112570224592187214667106401223808181715",
"199604414448261961099120110375808167899",
"83329415575587723080953998307056788028",
"145869456398345187467225646210567103871",
"45897846592239116755211822135169715468",
"254465211089054110734229795987507878312",
"225990734838517714225165476208073074544",
"77804125996679236061718876563591299225",
"112570224592187214667106401223808181715",
"230393014852189078522745459040558560796",
"23900544266505738388726144579910810732",
"29474317250836752390275334903446332277",
"101908978911630902362668293757359281393",
"28124356009338187532061810576696529255",
"165119042131329724993856288249067236274",
"53199556400171581009510701816400263680",
"89530631149646386007498162437196024358",
"323743568453199195349862022191508951584",
"4069370344132072272431818862599406905",
"105674608121422165095638243374250450022",
"36981770028998905325196477143249045632",
"320045810931005537724099041679453357060",
"78862943175081354717575912057369102105",
"300132547472157778014108816011262050027",
"120607453440115609496252157755983585332",
"237804843482035417278339512351568294681",
"173148199664388081675531686486086481164",
"279588489773012208986547852475794299861"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-bd982b37",
"target": {
"function": "main",
"file": "test/test_append_to_strip.c"
},
"deprecated": false,
"digest": {
"function_hash": "170949476582844107314671782089283152158",
"length": 1661.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-be7c1659",
"target": {
"function": "reverseSamples32bits",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "323127486596629286333908702897657266367",
"length": 1685.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-bee05276",
"target": {
"function": "TIFF_ProcessFullResBlock",
"file": "contrib/addtiffo/tif_overview.c"
},
"deprecated": false,
"digest": {
"function_hash": "46676840505905165876422752039100354722",
"length": 1780.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-bfcdaa4a",
"target": {
"function": "_tiffWriteProc",
"file": "libtiff/tif_unix.c"
},
"deprecated": false,
"digest": {
"function_hash": "113203184422542730146476092235596091461",
"length": 541.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-c0054987",
"target": {
"file": "test/test_write_read_tags.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"96872526091064949035217978120147714481",
"117971320588396959839514438515772551884",
"69701556481732628829260173540017117612",
"54564995803108880385473921505888978336",
"139088064540750285375041366686059476498",
"182786743762158018857418734601213834654",
"104552782314780050512028671540246467079",
"306440007649658300768658968203765072678",
"239130364237107128610398912588709153572",
"305532454575428645281420076243555784315",
"75968417715524101134968011480449426503",
"13235144626810275692502576596058883898",
"86072140295276791090180985848151632800",
"217222847760353013325986045973408348947",
"146185265185313242396450028256308432774",
"285375259665474369930482758055301376289",
"86866848380908879210882825321277305283",
"21197739161547960593849987271544496609",
"37947202163219666310857654096673808180",
"108648718340225749349930519001435298753",
"132327594567837036604557895976656814047",
"101932899202011025651141223615747614445",
"6598201304311862423029642279783258867",
"337734851424820437619886894140015763617",
"192092188364718285765844708916732223309",
"319797216849554304268516565106234878811",
"56702169141920137656625585919649011000",
"310314085410389622619928721878089526740",
"322182839147331013897013276347400625593",
"292995684032984292039449642627090713963",
"338658295022277161118865614540691015344",
"56855844604597738926507856963980165889",
"82007596823161612208694722922198786966",
"57854026688661084116577677802516370270",
"106520326692644257558884923654419388516",
"132327594567837036604557895976656814047",
"101932899202011025651141223615747614445",
"200705145137789551590766236594822444209",
"194536006382136985208330709865414925033",
"187914575157421168755207579422885966902",
"214432438496201387769834106151247413984",
"96448446104643252210387537183832951935",
"129187357840866037484924695495686133776",
"183836227198919550967095545963952007364",
"131376551948071315849021702484735769802",
"291748774134387316052870443259168393421",
"289180429675775897394468568115988976666",
"125096126017624559844635874783666909056",
"283676676030112658134520727811270909641",
"159099313434780586554638013261135853516",
"266847426931083703507236565301466521393",
"198427578301294138673061680160033669413",
"216946154654109359178047790349700620740",
"169260150430855082173377645987379333176",
"275209215917109451164991541680015245138",
"76755135077105134235823843624722556334",
"97757004731814861155083511610894151057",
"269781233575562653610474392768094684225",
"309530232832789527578492901984840468726",
"202144015547260478002825531548636673430",
"7089167944072503987153785192722327593",
"7042561067645416719949507989437238620",
"10654707543769709293515471032941670207",
"289893213224094076643880369799032780497",
"219757291653343999559597015508372309415",
"30420058620816686935108577342932451411",
"229700655782769674981485733267589701056",
"146014840780736990250613573444626169813",
"234152066618712065855224022970770563734",
"282888313776121917887738707526249037750",
"269781233575562653610474392768094684225",
"66126885094484895441119133722393023820",
"164002430850977463440377949331245823297",
"256947521981832640302979695939754009844",
"64162214976535298428173357720765059050",
"151565744095030064580376988977046466453"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-c0530f3a",
"target": {
"file": "libtiff/tif_dirread.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"211021190965377891835559236643051008235",
"232219778565863966732248163458644283037",
"125561946240422468540179280797189157979",
"84215210368062973200758335920170878956",
"179754751631057295820410501837407244590",
"303312087763803703000333947003581506013",
"206205576057331060491910903199361372865",
"190933903251374995304016984322992947503",
"149568975780565683280130324309407256766",
"336358547144402296252473198689844099076",
"333600764271077745577884122318512404658",
"79765249533471551023890462319117202197",
"153964050602889136763579691543505991217",
"202797488366587911426633402195320588091",
"314855745829640431717366899036065578399",
"191962665217772050963885714996064477781",
"267325195352970110536553922470403807782",
"46286795829447021355835331017062569742",
"324206013315651534021008320997057316599",
"275880881284490018786245486076659971941",
"106216721450121858394702943953682966845",
"51000664739102326574070677366870025560",
"283792601497116543448667106074154739971",
"262928368858175626787406921469034929948",
"193746350471709942133241526215428001016",
"203674249241464422848448070738135867416",
"282586415233821680894507713260778785946",
"270070412315480095418471992244151821902",
"324673784871420260905083435888100025796",
"319798767879170853804044520984701214293",
"176241157797867771580691116636520007242",
"239333259260712661803904507067522060475",
"170977239873380538843394369624726480448",
"110659883433300388587562230234169917125",
"89067304757241144828273810470124375968",
"89201268554944925486127519845552044495",
"24544158152685091033610697073552853593",
"279653298247303926540564788900055689645",
"328755999210781204431244983213284859618",
"205794589129283301135560330783708871986",
"151026488145625668057855484480302688372",
"205689520872375202488972076401825604989",
"209094946716006251333148422210500600153",
"247880249410528857962907844553304388999",
"316374780973941912408703393124949237965",
"19615938661255836899919778709779092535",
"309377951230640591374462915659703538229",
"107213698620863393676298149147849044578",
"88482536169648245523090992210327528456",
"120811759557240912313190208972447721846",
"151026488145625668057855484480302688372",
"249979960938012729473695439278727901083",
"252820486389380050169086429283195655863",
"123736470677899993267688698003235279112",
"310704337065878754240485918994099541004",
"106775565773090821570179621546987596071",
"88782063280834286824964238227621930547",
"334559057568830892298690759789525598201",
"208647177089051354739999983669000207414",
"77468044897414011913256699573801884440",
"130559700965798138420868831908661903560",
"264721877086141272577295972627590457164",
"30978320720615330706760058096546500401",
"26679051651457379686987091228312723083",
"144445349594562323551016126529741564270",
"253835863923850803489072065468889624440",
"218079992186628078297312190465141641178",
"40826660073693086366347809583896340852",
"30098691908805925174121331431505491960",
"254289584109596168651140996421284585012",
"116218740340319136234864102695525233288",
"142768994010001030883208795850504240362",
"42310719798256545488706331864371906822",
"124133367989441411292619006713462483077",
"89761003277756003434826425535515301103",
"199465087861449299839448871687123917484",
"165796080937285896009357332095694199346",
"301555449880439793817070309706269712057",
"17899287861416505974974381492413574623",
"294006038487258243966666995209965390027",
"97013868993773866922104742643776132282",
"149863698454575327333666731850951191694",
"80029741480080940350166432464166533840",
"273283359185475168285292524822523575344",
"19382073463752030817370321084690222897"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-c060b611",
"target": {
"function": "rotateContigSamples24bits",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "11912907568920021124145093474845416800",
"length": 1677.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-c09ad088",
"target": {
"file": "libtiff/tif_next.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"185540845176815815810868127156302817691",
"1842900825771638101513007374340002774",
"62389302220733217876130687421456392140",
"204602107513775566364887137192186817440",
"43698519076226646194044974175317274483",
"161306538234933221508424175921311891860",
"306910351859939109526631260664174307283",
"5637044708934156076249427530953649858",
"249489738393263049760880289493564343270",
"93798496387766759873176940059530835439"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-c0bfe93b",
"target": {
"function": "main",
"file": "tools/tiffcp.c"
},
"deprecated": false,
"digest": {
"function_hash": "194872206714310409938108306515398099719",
"length": 4038.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-c173319f",
"target": {
"file": "contrib/dbs/tiff-rgb.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"114021433661495708057002308028505440612",
"104006913222827527579048592836507464602",
"326412507585311798824201385305030490506",
"267587109953476874785228961966059442243",
"42365868582241223437569345084415531756",
"320086273916353181951399960825871866426",
"88164301693851892258580557113409701923",
"337248845651764630347791252401114019893"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-c22fc1dd",
"target": {
"function": "Fax3Decode2D",
"file": "libtiff/tif_fax3.c"
},
"deprecated": false,
"digest": {
"function_hash": "45450517723326355389227068971051303920",
"length": 1362.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-c2aecc87",
"target": {
"function": "TIFFReadDirEntryData",
"file": "libtiff/tif_dirread.c"
},
"deprecated": false,
"digest": {
"function_hash": "320819657999225015240910629164470745818",
"length": 641.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-c38eb235",
"target": {
"function": "write_all_tags",
"file": "test/test_write_read_tags.c"
},
"deprecated": false,
"digest": {
"function_hash": "179793331437459370374739921839843651919",
"length": 6260.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-c3946d0f",
"target": {
"function": "TWebPDecode",
"file": "libtiff/tif_webp.c"
},
"deprecated": false,
"digest": {
"function_hash": "274696104429653831972425282645517664794",
"length": 5095.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-c3cb2da1",
"target": {
"file": "tools/tiffdither.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"165587626480098521575506903466855477100",
"34043677200457047786008285356431237534",
"277810986809411291358709852959824209762",
"34244742079233941317700921161876708107",
"317421692593584202597371166440546647136",
"296908391779872388027620177841963905474",
"250775963799308722380831192798024609826",
"162779757212095879905765410898716272315",
"57248558322408199842487312344085721158",
"332955815015258235250109088339795585965",
"129825565699258770349389150565217198559",
"94321195360336066130555957901209077928"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-c43d6b62",
"target": {
"function": "TIFFRGBAImageGet",
"file": "libtiff/tif_getimage.c"
},
"deprecated": false,
"digest": {
"function_hash": "258668647499647774107677816064285610587",
"length": 882.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-c472c171",
"target": {
"function": "combineSeparateSamples8bits",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "298211217851728432953710512234938687587",
"length": 2458.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-c4e42bb0",
"target": {
"file": "tools/pal2rgb.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"57248558322408199842487312344085721158",
"332955815015258235250109088339795585965",
"225236394312966942291789045449563659663",
"277011371932728036503887833120541582822",
"24480935497300546622016979461533235560",
"130721294688436430744388692216262741888",
"282464649106834527650834952307866097927"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-c55fe931",
"target": {
"function": "main",
"file": "tools/rgb2ycbcr.c"
},
"deprecated": false,
"digest": {
"function_hash": "218421038520994959154755359427451184210",
"length": 1828.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-c5c292bf",
"target": {
"function": "extractContigSamples8bits",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "239130505708278601348434017818403327096",
"length": 1600.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-c5dcc72e",
"target": {
"function": "TIFFScanlineSize64",
"file": "libtiff/tif_strip.c"
},
"deprecated": false,
"digest": {
"function_hash": "113445261411206484105189651529987074428",
"length": 1700.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-c65a5702",
"target": {
"function": "DECLAREContigPutFunc",
"file": "libtiff/tif_getimage.c"
},
"deprecated": false,
"digest": {
"function_hash": "232929134125334900322283884893777469565",
"length": 958.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-c6bf42f4",
"target": {
"file": "tools/tiffmedian.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"97636019366558583725016751813029868328",
"332955815015258235250109088339795585965",
"225236394312966942291789045449563659663",
"277011371932728036503887833120541582822",
"58916062086547263076446076110799343467",
"10402763230815265842922727597079781949",
"37101767685388207232981668474006931175",
"44622711935359190899596504610161444188",
"296625570227175081895925078144380345934",
"227884594205218171446136119002831346156",
"283947270905206589499039672604495096961",
"187155652843011477950851962098880084861",
"154761734777909909432543903272787598345",
"229117838777058241623731833410586761758",
"333277258641875968405375631113063676840",
"78391718795728941502685694734427275554",
"316652426416423863720907676266717658634",
"215553129170843624512783441557470219439",
"11254840549167530720242721424442278828",
"79795303191949826983186981214023083995",
"100696489411813583155592875990210463232",
"97655197696431921839899852094216447874",
"48133362420802727419381239909310793822",
"285957424530514259475024064892587025152",
"145655117687287329844175215330223168800",
"37134611485961063996111024637144924893",
"319472539557386943942419132952723427435",
"106942666311905478876154812820780997243",
"126299788532497015267458416480136171433",
"10456482868881125691314328468930411457",
"312786317451589170662880472740536958714"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-c70ddcd7",
"target": {
"file": "libtiff/tif_dirwrite.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"337945421200651429563669651672216060284",
"161815576966731935034544667003920680555",
"28289197134510360206725894852000916563",
"22465414769092200599578184231752622135",
"307280825158989466862865362759844488166",
"246528586886885252721930110746307051562",
"258161658591795187386919219225203786829",
"37695835814101155789416460647249389078",
"122368560762870791927434787384715088822",
"253356093258732069566660135076065667824",
"236896576653468872969425376083204120410",
"9304092979779043828259097444937882351",
"221276232477413304919260410795969807349",
"22869243842691272835347837844721071116",
"88138917777180683469836917776698276412",
"173788032813554172117781621708231855827",
"138841830703206389197949680979883085891",
"22500429017430088735910925088222837364",
"140822058889869803400597464225698287743",
"295081788690779391589822329195758946007",
"84210710273510763479170586021163698186",
"141800515439311804225729035376468479074",
"327283395793812910717416220947926900695",
"64350041740872801175069230399667439954",
"333633855040505190012203863028131098273",
"40222006092582330462682256477471222058",
"217284117009847869742731055638023880826",
"322598228126790860594334658864106775263",
"174923780876125356846837060536808482017",
"196356560443093951238756385034913487253",
"184048968443975959761367283699224865145",
"2061754713636573749943718473476342725",
"18965451291691206764828295702770048360",
"5533791217319262232134609922141705764",
"73691378751909650595030661605255080699",
"14993338812641424064805810006003288160",
"338626128607823547664987874091954863275",
"202642320565909854517512108083106648308",
"39363754094107060623216951096272097568",
"11986591967160583816982545324684422091"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-c771323a",
"target": {
"function": "LERCPreDecode",
"file": "libtiff/tif_lerc.c"
},
"deprecated": false,
"digest": {
"function_hash": "251541066481735921483744507278836399000",
"length": 10676.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-c79aaaf3",
"target": {
"function": "Luv32fromLuv48",
"file": "libtiff/tif_luv.c"
},
"deprecated": false,
"digest": {
"function_hash": "293328912699718522163949939318643760234",
"length": 667.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-c8bffc8f",
"target": {
"function": "t2p_read_tiff_data",
"file": "tools/tiff2pdf.c"
},
"deprecated": false,
"digest": {
"function_hash": "9828218995889650106155486551863531074",
"length": 19049.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-c8f02b5a",
"target": {
"function": "extractContigSamplesShifted32bits",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "145865670200520606998445048511102723164",
"length": 2262.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-c8f6d59e",
"target": {
"function": "DECLAREContigPutFunc",
"file": "libtiff/tif_getimage.c"
},
"deprecated": false,
"digest": {
"function_hash": "245890537200464133314970563801278094412",
"length": 2290.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-c92433eb",
"target": {
"function": "computeOutputPixelOffsets",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "59657347431072710574816681780919233476",
"length": 5327.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-c95d0c25",
"target": {
"function": "TIFFFieldIsAnonymous",
"file": "libtiff/tif_dirinfo.c"
},
"deprecated": false,
"digest": {
"function_hash": "212399869678914672238087065435774503728",
"length": 76.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-caa3211e",
"target": {
"function": "test_ReadRGBAImage",
"file": "test/test_RGBAImage.c"
},
"deprecated": false,
"digest": {
"function_hash": "124643813599843052830354683351455833203",
"length": 4284.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-ce2210fb",
"target": {
"file": "libtiff/tif_pixarlog.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"263157882378979804699161185268510595584",
"237149684869169729784737265480245830170",
"251844228358923078272536824723457907637",
"59437681900383507848669859893720861341",
"165789112933005217355954721152442145602",
"30527311654507800050471351752839097655",
"59615469718428243963302594514142433820",
"328492098297191347657916019688026331622",
"254885477562009190235686681099092929909",
"189126677303253402140404890629184495347",
"109156127039824373162683417248276400551",
"14558829208086521301048981909438854745",
"189511659165951408361844509252740155586",
"294333768273217843691806251256434396081",
"143663164479833446381729093180661346589",
"330468046518052343206848828673811629188",
"35582914895110865959237086107628479902",
"29734694041266102160547054512095784710",
"253127961645210076548906180351465785698",
"282534874418075086453568915142099217279",
"280287746644737529362999482045802793601",
"91063900000870251510172547045522326409",
"231047261980672327974845133264746074865",
"27698804400873101249758256259336950072",
"186915207046136038744806235713542125999",
"335228489198111181571999880717605589856",
"114880544990543398437402292171857975513",
"306248014003448970435664254717271475574",
"265542291590397576018565121959139049437",
"199542394029313682618161923945483726436",
"178992130452648839823374418813656367675",
"288604645152098610097479743436949134169",
"114985014057218016416734503919806076551",
"293790142978095912125592017078868824202",
"36927258997761472213937017150312467351",
"316253553314068381096704101078050635236",
"332595908586818422036705266688130617528",
"114639753610018793727709558247235280715",
"3840633601966429113984416459130656245",
"162841029133515103811028870163884702238",
"338889347080417047596163379710002234608",
"192232310587774137197367671237669813630",
"45797289819641587712801153567836974679",
"68490574796026431664957346120357419540",
"65597399866361115688873487757636338976",
"126204469268912608423410828191272474543",
"326033428569888987809457569807709768156",
"297818407768879916936293185440941521177",
"92540389270839294256578955238295051860",
"310473419644216797190583880352999433597",
"20777363237308804111464811365249904661",
"145692829820219372008246628498404461615",
"232176243737355372613336157940278527656",
"218322707479518330757124003943325830285",
"5622288840821475922224121928273421086",
"231318589169031484578819018282851141650",
"78617224933349609878435892883166080414",
"252324236224227149346460317969825097623",
"7095505392089828609748445455908350289",
"257009082784846328664060790325776150712",
"203639557814959594429832003245435143074",
"93306718513474115413543695276886841063",
"201732610554458706960183409926241035045",
"325183620390709909320733036222812519444",
"4903632887625507882375491866028003214",
"282534874418075086453568915142099217279",
"148224824198148055786357310972992756011",
"334375525273083619622948277994266174702",
"297056298566696395599908290437723802793",
"173823603598894149616098849817845113936",
"25965081123362991504060659628381491790",
"276090284123045502233807941147666986896",
"275241654264800163649820520314922490697",
"139407188780065254008055593718185123946",
"303066680061699759112490022710347753847",
"113934560409076332287723455342282341158",
"38116064280070239882471591497783168720",
"53371305364265765211591938037731306200",
"4329459376245865421374626869987986567",
"77535990243893664099153076732301432224",
"196487625340321264482209560609598388749",
"185396468273363368743152700700024640692",
"318156111030001394790561565995051327284",
"5379220867105422934903961246707544964",
"27911904527223838205154673814523743821",
"167192864491510225920163447706157934901",
"219817766256895922869559412274792100944",
"192813800847667125722652984191120336243",
"271297075615538415786851630882248428914",
"260657049105981067934711399548169939962",
"15999906381815547427885348845352753750",
"313305867792580801784101571847237254830",
"88614477344140527683849214414216263354"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-ce2ca773",
"target": {
"function": "putspan",
"file": "libtiff/tif_fax3.c"
},
"deprecated": false,
"digest": {
"function_hash": "168854266157869281718503171777461199841",
"length": 956.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-cf9c0b40",
"target": {
"file": "contrib/addtiffo/tif_overview.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"251679340007631206049559157588767170524",
"132848039054274669404348564947024133251",
"288500940583824527447059348923314258375",
"135331000428626837810237651050545036616",
"288328222626041836735823364172733826948",
"301839808498981804402312324732344671853",
"25025959855633871608646601065729072902",
"319667063104744608141900177235094218853",
"34392933795481970798624376712822734433",
"228317599258789163724064619165686024827",
"179773801526591617885755244274092787075",
"197172834046386986891442516362626872425",
"111569998449310080936530348829206767179",
"269831122678869861725015974753138407426",
"229627590876591385946036839474143399680",
"234172106610413732010940578312898148587",
"156190204885484547713860646120399893995",
"117200393918323383547483054058970445218",
"102948851889060819136695198683092680181",
"174094898813388832832489850132227141640",
"221417174389705137408231881774291872066",
"26508647473898667299195230052079160594",
"308153734937597473329918070038555845869",
"261318336005967473247118873778721287208",
"249937733249178656105570213856696015682",
"29379457745267203519055588965332433119",
"230496810432012290474942129792775268282",
"282999174376759950033172595429417093056",
"7286139467959156432303597820439504196",
"336581336450709301793842192834419273918",
"221417174389705137408231881774291872066",
"155621851813556739595392397847560551417",
"149016203138317472265799365606828376814",
"90957814868513999338426083223581398627",
"41634446671283870197803006906165524284",
"236452574127507936291086565869549215538",
"98730766215126338302131545082739467554",
"80147662739140749953649279503037371687",
"247011610978466448606388184113733809661",
"271318632663106871087709517760747057707",
"228425228017078598287788527159541235919",
"154871808639255375817685178796771975547",
"81989121877606693440234200674491817890",
"291068049370147063739809290248187359284",
"131863127941412149517160314794575394076",
"85125679211793175395157381780026046846",
"308408777511137728239257695409883781889",
"152771046231147029088436040272745489124",
"264730963796068549084287288416358470998",
"226819983559787761620277053360332449437",
"103454918043665393625222355491674368762",
"20291196959740743394070506744876955250",
"191522195023517248333161859874619518984",
"72655970045246529845326150628242974928",
"132375741973908198876057556073875358364",
"305052995849664045219977708648641895752",
"69611963446858502599771864358679891150",
"177574134743879616995326032084491844232",
"311317578029072666482716320234543045798",
"80326247751248489476684335546893523205",
"180321018974902728105591143427482227897",
"283046043233660083999353325316395529508",
"334473257971962062793130770121846604417",
"214404229381723624963083804552992603487",
"225836675899597344667918421684037199250",
"330724181177644815599143677929568858134",
"252765077465277838147361951448833839090",
"171706588578344682268948912959609082537",
"129440156784203910773659705557133500892",
"250600038348156773632491650381758902731",
"109048900499925744152703306108757074866",
"164808341044514678252379588638714472698",
"241102689157354155496282624323359036441",
"128822535558905690501877861280387828094",
"268091248351226142103480442051188725775",
"234590035720420532640674219638177291724",
"92173712303206295070832952908326958731",
"68276613358630338643604681657506666375",
"72913904191823943291778872259574255156",
"279269651197053296401286234656717027189",
"123148264776177024805447509617512676119",
"321308250696374563962767496369227833133",
"53051382473888545433418189998127694394",
"64985894781583749349290151394224589536",
"231181756695226316794051404968344025052",
"150858317656967264006153678780039802754",
"13521653488679569331438491168964753083",
"141159488257805124254283827081408655351",
"106442746016235814368625536976443119913",
"22625412045213054526188570173619147350",
"258949957525126405357017247707122909114",
"75216714164700283275919512572008008866",
"103454918043665393625222355491674368762",
"20291196959740743394070506744876955250",
"191522195023517248333161859874619518984",
"72655970045246529845326150628242974928",
"132375741973908198876057556073875358364",
"305052995849664045219977708648641895752",
"69611963446858502599771864358679891150",
"177574134743879616995326032084491844232",
"311317578029072666482716320234543045798",
"319385166860022833272519508695230637774",
"177346206921054746269482180272740439908",
"192187469949698270690080338863128140065",
"108037217812811573820855556498323234118",
"257433289127859476212249377203016934147",
"202436789487005770746589671271002660879",
"265097157174591360581446321539071405297",
"59182644663159194032925993229119360256",
"121479191682363073039758288359070573607",
"225988886888174770530986919829059349409",
"80514433629045404825500725974752538904",
"330857518089489197195979118040152431436",
"165559370693483266233506311999935624703",
"117860649945670132017683155273618873521",
"220114744536588091137816199147436719322",
"43099686097267821170085317085545671323",
"43111661659399402048722957717623141721",
"190311947424804466873838305301142435425",
"301951440584276811974804473782543439721",
"21670639962500788261103590508849628108",
"109029814224283585623771011659185084525",
"334473257971962062793130770121846604417",
"214404229381723624963083804552992603487",
"329439086167083095336469893229579271898",
"335013238418975151085713283012385869269",
"105232727707364577287419963690759829407",
"47783322360667164717286261708691731602",
"22824101340709086030115047960225311554",
"309154451778504047800739773684853786651",
"241102689157354155496282624323359036441",
"128822535558905690501877861280387828094",
"268091248351226142103480442051188725775",
"234590035720420532640674219638177291724",
"92173712303206295070832952908326958731",
"68276613358630338643604681657506666375",
"72913904191823943291778872259574255156",
"279269651197053296401286234656717027189",
"123148264776177024805447509617512676119",
"321308250696374563962767496369227833133",
"53051382473888545433418189998127694394",
"64985894781583749349290151394224589536",
"252616089342227453566823635196634777916",
"243452507502189660531713179574491998056",
"75666454179408309433452523943108328538",
"284154980338121512133238822819974720362",
"272785645691399811313609834116721566759",
"213130912961988466564849740608387831750",
"253745265805384956179341656135677007379",
"52513472473336529646420189855747732394",
"124523622635624885478605817923981754521",
"281362964041367351938979619839384325578",
"22941989864884242182084957438578991076",
"155145900212646652269601830746836394235",
"188968841679979791484345949905330066630",
"251847493532113683986689810833705210356",
"9805512743480413572924945459306785426",
"190311947424804466873838305301142435425",
"169044262947583787994658168802391659246",
"278805069499801661180770968678734166329",
"279736423098092879879202355429588352028",
"63942715558445745695905642591148431644",
"130371843730933198495648640802851434745",
"47783322360667164717286261708691731602",
"22824101340709086030115047960225311554",
"309154451778504047800739773684853786651",
"183232023843231407953169477759617352675",
"10039861641229556865258449491744987567",
"153036008357798267435514450304461061061",
"4390649466622889929933206187026052977",
"75036513658010521839163229190503741980",
"241754690705949189961337401411553405849",
"181842963714869133972079192461566704327",
"117495150275621485311136882098062526219",
"270028019136759118931712271362742332803",
"287878365180428579695188091901052722922",
"173303164618977637316496599579470247478",
"302049053911753336351846730563385658831",
"319675148327613456083683749419344416177",
"231949481890206683928304468870788400190",
"278939987710396570733711181149944342839",
"50289331360683887263150486047798517288",
"283740411738258748263321416977798280799",
"111439644817312634812681042643453715573",
"310885184246976321541609769471814382992",
"329166781298281809751573574797670733120",
"88410874477883928627698110713210747676",
"73616288734520971044690584533443922428",
"160081351808863091591853304131772028823",
"109443333504054775217419394699294410112",
"224541780881598557706508286336677699770",
"262739237473900248770031956076132611003",
"278824024910815929997659546493045126838",
"297172397474247057325670746012213748464",
"66429865402974173896771900010189429497",
"154108319601028900394701220096646900499",
"132164328941130787990994610711804741055",
"190011745347073152281793377551921963906",
"323318229012193573074158144180604490621",
"64441459754379185469404481360496659129",
"38432535479556066669183358053460355467",
"69541960571618083847432670530323673925",
"323280416126086379119186222627838343830",
"46662757983045333392804162982734139432",
"261592390438531868837910924030416880203",
"1271786842865160485524613309468050976",
"42395973339112036892868510994981574105",
"72190248827240605173564475257986363326",
"184385622655009831481063121148842823498",
"250594683043640338813279943110182088991",
"211318620833788398368834977925852253863",
"44746815719052927674273388943185114318",
"256494545853093500531535656721519420886",
"36851485630997615336484926126314239375",
"83146829739507441920820910540874993260",
"58455414694237484342966201519217681006",
"8395635970059845272237891818779229548"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-cfe76de1",
"target": {
"function": "main",
"file": "tools/fax2ps.c"
},
"deprecated": false,
"digest": {
"function_hash": "30752814006519279877800483134940438304",
"length": 2625.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-d076ca2c",
"target": {
"function": "CheckShortArrayTag",
"file": "tools/tiffcmp.c"
},
"deprecated": false,
"digest": {
"function_hash": "73854498107486504069867846547181715602",
"length": 1110.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-d0e98eff",
"target": {
"function": "TIFFAdvanceDirectory",
"file": "libtiff/tif_dir.c"
},
"deprecated": false,
"digest": {
"function_hash": "275418437087881762786649517447748875356",
"length": 4654.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-d15b58d5",
"target": {
"function": "JPEGDecode",
"file": "libtiff/tif_jpeg.c"
},
"deprecated": false,
"digest": {
"function_hash": "263585294239572175157407238193117392018",
"length": 1091.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-d1c50f45",
"target": {
"function": "TIFFGetOvrBlock",
"file": "contrib/addtiffo/tif_ovrcache.c"
},
"deprecated": false,
"digest": {
"function_hash": "130819122173501736374912116322374815742",
"length": 780.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-d1f9b1b6",
"target": {
"function": "LZWDecodeCompat",
"file": "libtiff/tif_lzw.c"
},
"deprecated": false,
"digest": {
"function_hash": "309384095440333882026668323022884366077",
"length": 3909.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-d2ca589e",
"target": {
"function": "LogLuvDecode32",
"file": "libtiff/tif_luv.c"
},
"deprecated": false,
"digest": {
"function_hash": "6006231470431530936561966805827622462",
"length": 1516.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-d2e50de1",
"target": {
"file": "tools/tiffdump.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"185489735960463513352739124764449173959",
"64108057572622958802317819178949828091",
"60853455084605126131237505797985458845",
"265145667964431145479822742255301430093",
"245032919801976650833025388710507031975",
"217090363728157298804988903694804704725",
"182343171940108357222177662072847442665",
"92255725527607781153251419230927425593",
"62652003632166648570283449036388968839",
"180761444154297070513984027714391761038",
"83380210660514933238286623424751193136",
"174725593331018127407255021397702935382",
"49872900153778336438330675923994615918",
"5024927188785707665862202157217054760",
"237696701962969409425979042716280318520",
"47380322699712813933679709392076410291",
"69103524775163262758769973071372454550",
"306810201015138251108140761674196503475",
"331978369501005365542021241736114544352",
"151790874211927544555571049219673769540",
"67479406941121871703189186544857709547",
"158947933094161645885779885740364309855",
"294231895301917087597914980573187475392",
"259825422294044528314609367171398560175",
"270349899949644118125371746950730389151",
"194818818890096918704071520129127850325",
"124650729458152574807192739610269892667",
"303569621038567169128208218838561577384",
"43074532513203344835691976643448312212",
"18684323377061596129331584689613568843",
"333022060340273666697519031177741453617",
"180211368625349575500106816665906038867",
"203833769259015367648907517435921317352",
"281688456106980974122465265702675591311",
"10396522587603340047466928126450599582",
"140059436736247352723882685079000765321",
"264676391101331349419091153169761520768",
"24891016031708176064150931050586245010"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-d5889b02",
"target": {
"function": "OJPEGReadWord",
"file": "libtiff/tif_ojpeg.c"
},
"deprecated": false,
"digest": {
"function_hash": "111497702075826032511759116480378490688",
"length": 236.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-d5ca5af1",
"target": {
"function": "TIFFReadRGBATileExt",
"file": "libtiff/tif_getimage.c"
},
"deprecated": false,
"digest": {
"function_hash": "217054109678916398863870578634107979592",
"length": 1833.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-d98e00ed",
"target": {
"function": "LZWPostEncode",
"file": "libtiff/tif_lzw.c"
},
"deprecated": false,
"digest": {
"function_hash": "67784522295279376894572538107710509465",
"length": 963.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-da01ab4b",
"target": {
"function": "test_rewrite_lastdir_offset",
"file": "test/test_directory.c"
},
"deprecated": false,
"digest": {
"function_hash": "83766472008190693171934691393196596548",
"length": 2777.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-dbee2354",
"target": {
"function": "processG3Options",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "151166637299950541083666866732969321126",
"length": 471.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-dc336de8",
"target": {
"function": "_TIFFPartialReadStripArray",
"file": "libtiff/tif_dirread.c"
},
"deprecated": false,
"digest": {
"function_hash": "249262708845754483232140384729150561468",
"length": 2901.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-dd7319b2",
"target": {
"function": "readSeparateTilesIntoBuffer",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "248507862604982706729224225465333517276",
"length": 2748.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-dd9b11af",
"target": {
"function": "main",
"file": "contrib/iptcutil/iptcutil.c"
},
"deprecated": false,
"digest": {
"function_hash": "257188927483449413157895288896385367415",
"length": 2829.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-ddf4005c",
"target": {
"function": "_TIFFUnsanitizedAddUInt64AndInt",
"file": "libtiff/tif_dirread.c"
},
"deprecated": false,
"digest": {
"function_hash": "68046120667124763330739263743744942486",
"length": 78.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-ddf762a0",
"target": {
"function": "setDoubleArrayOneValue",
"file": "libtiff/tif_dir.c"
},
"deprecated": false,
"digest": {
"function_hash": "217127577893703849110337820604780276948",
"length": 287.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-de897c1f",
"target": {
"file": "test/test_directory.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"242536209426603654870453905886178837672",
"19200958080587875804119020534272200856",
"105504377316821010189563674297438579572",
"94108432681609740873868629895489375563",
"8449279035050173332497609694822542663",
"60863877728780496286479843018089093993",
"193829303993686265249484462225127604612",
"192887090135424218061252430242032237490",
"326734380862161762768990493191756884399",
"276966511124050595728369660074467782029",
"296073353246928877908247136629060154948",
"235089842286203150160293414379924810122",
"88053546413744251417952384797570373315",
"323285525236743843412276397017906491709",
"113129010967080042393793208008457833071",
"115288614246825136773425936489882315797",
"202613216016073943961978016542596359395",
"3652263122880708012450417972124175927",
"308153537681534857828158909970636874565",
"337494902789593435023841080990056796003",
"100109157749067703391457809612037870300",
"21739151519923134527966419377232403303",
"204193661266532385910403653485357306052",
"247640487548911055792211844114070460368",
"138210500693708763220667938637626522008",
"183587100334565829814638231788014258607",
"115288614246825136773425936489882315797",
"202613216016073943961978016542596359395",
"312790272365525541804702469620756122463",
"337494902789593435023841080990056796003",
"73647492976604316805700975708608460784",
"289873733640952440413935291286408215320",
"312790272365525541804702469620756122463",
"337494902789593435023841080990056796003",
"241868904395731618489251046336337421936",
"88769154513824814749311141226277059125",
"109394249961467462675590245411037442553",
"128193165194031310815284278662888167775",
"203946148126895594967280671665057864553",
"328872726021484847969372937849429641924",
"333052338743792080539048169079711383971",
"295284850485047162515063019141819033978",
"23842726624133422071314523213072243910",
"112443456687990476582573703905111006683",
"5651982701003787176823652166816337412",
"123975509432473146745927806976190624248",
"297996222113463637728828022482137011203",
"1081042779539506171249125260369036540",
"121827242215286856345284227336463172910",
"68712950507403377263986029179489005318",
"217116736670628675719212367738569185896",
"49121577365090761207754818775848358467",
"251261703853019149319968732634214756505",
"242072789024478631567778733286167281811",
"140669158834887864628269300880598070798",
"47875020944991726482973312799443678454",
"243833035765960016327819441163641604784",
"110039608529598459152386924148401303246",
"330787801988475650820968784566710611274",
"225875904147247515179241150271759212192",
"165429700802176255868636480328137729501",
"202613216016073943961978016542596359395",
"244885554303186432187499327623530570281",
"309696299898322982588936661970029151988",
"168122841240983869595821545401755005640",
"202613216016073943961978016542596359395",
"334851606508181445033862438716230814205",
"233548325761270919809748385816555465497",
"154663847662674692982143363541981776906",
"47799950604583902056581986647907742493",
"59106326997306679830674586529004180809",
"233548325761270919809748385816555465497",
"154663847662674692982143363541981776906",
"47799950604583902056581986647907742493",
"261152514033138901378158452750671284781",
"329311229092225591862642149376710830794",
"99628176713807898009423574738758106077",
"60756547495352590950465469343841804081",
"204634771496112602024775437553075831544",
"288032225731870371391888699204906312768",
"333735014783496405942742671679561005470",
"7408176835667623403547143076419169020",
"240065818461121283823142805008963817695",
"40469291919066102821643294174166165498",
"300513079757630078623621827486058598789",
"221147990291347850622175832463418812556",
"18693774187172854882987722884930576812",
"40469291919066102821643294174166165498",
"300513079757630078623621827486058598789",
"221147990291347850622175832463418812556",
"163818773891423383816981642485834145512",
"58272499928318979596096672724492294918",
"192156134718690023361709436337406883105",
"220531704774811430573306263541660345759",
"175012359861396936964678289405659157660",
"101406521812664343169466572007511999393",
"6648272517277685711277457595042478327",
"282024697784612210726744660143887768085",
"163705387401414270161751981414240182218",
"317239307913502890134164104052230181593",
"310519398163207892896296310420070140725",
"28558201032354642636979077427436417869",
"102857517878055326134725074501835834230",
"152696762382295721439923261029216156474",
"304173622255150665849562927187729577713"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-dec993c3",
"target": {
"function": "read_strips",
"file": "test/strip.c"
},
"deprecated": false,
"digest": {
"function_hash": "332647133107026463986307540490005464396",
"length": 852.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-df7f8136",
"target": {
"function": "PredictorEncodeRow",
"file": "libtiff/tif_predict.c"
},
"deprecated": false,
"digest": {
"function_hash": "20995650215038601764445614476490764425",
"length": 732.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-e052a99c",
"target": {
"file": "libtiff/tif_predict.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"155126787189251751351214896424296282959",
"146520287166512350247604005987477333872",
"103832446744763308798431152184508948402",
"155150910403314733620284808251045443571",
"265882156617048059455151947399382762367",
"212691262357679259057500901277373773005",
"113145344687933596127831912162976526035",
"297188213688722114990216831265725497103"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-e1dc0f97",
"target": {
"function": "create_colorcell",
"file": "tools/tiffmedian.c"
},
"deprecated": false,
"digest": {
"function_hash": "88368406381916911989046850197148231241",
"length": 2394.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-e1f85922",
"target": {
"function": "raster_draw",
"file": "tools/tiffgt.c"
},
"deprecated": false,
"digest": {
"function_hash": "221112731903325275676631449405174951367",
"length": 148.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-e38c706f",
"target": {
"function": "setByteArray",
"file": "libtiff/tif_dir.c"
},
"deprecated": false,
"digest": {
"function_hash": "140745940670652830510771261536287994996",
"length": 359.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-e47b67d3",
"target": {
"file": "libtiff/tif_color.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"16796100553247200981274961774109461858",
"61756326224787467696739250568887880336",
"153948450525905981119678686023777623878",
"282080854429033981518973189419203965024",
"204637163491833055030068388684451867620",
"76371137313120836126352620040608838477",
"2844431240950579201474378198336276485",
"121470777143878188766156346600315749187",
"97071523999967424263810363334865316039",
"186397800289085189316278993448990418253",
"112231793731840908080528463286777821014",
"302845952583632771297965220502820019536",
"24789795463595117928376376155130729420",
"171033369091453906157924856785921112795",
"216703693005930643889830406450602930658",
"277740425050853371785498275112405705440",
"49236224148533859745617430587563229991",
"131101754860556966841912411496553941488",
"17554593146817192521010622642214525949",
"288466694561419477308325790687667065439",
"152115204335240167643037346863475016108",
"151161606763958175501399628754140557565",
"295286772070420420637393055537177109600",
"197224322866068054874303294992025631144",
"124000390775595174339780913407406522983",
"5161833255112021969913476331912016407",
"51360275520006607752775898770652176834",
"186895430197625118651418050289240385547",
"147677013582446012890283336111479171100",
"206804703562067370267944055976281996882",
"325658669648846953849308367306101866673",
"192929641698022422919905560022580890320",
"63025787987816682031022701784661544384",
"36141188827339261878568287134524751333",
"181648503286042653792923805284307402012",
"289563123838364462717452333894373095567"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-e50acc97",
"target": {
"function": "guessSize",
"file": "tools/raw2tiff.c"
},
"deprecated": false,
"digest": {
"function_hash": "16130254959397020614080347339313062396",
"length": 2689.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-e5bd85eb",
"target": {
"function": "LZWEncode",
"file": "libtiff/tif_lzw.c"
},
"deprecated": false,
"digest": {
"function_hash": "321819673856524752020593069082802915326",
"length": 2580.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-e5c14f8d",
"target": {
"function": "TIFFReadRGBAStripExt",
"file": "libtiff/tif_getimage.c"
},
"deprecated": false,
"digest": {
"function_hash": "171063350996126936807596036918577043461",
"length": 1109.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-e5cddf2f",
"target": {
"function": "ZSTDDecode",
"file": "libtiff/tif_zstd.c"
},
"deprecated": false,
"digest": {
"function_hash": "339586761093101602483542522522551255377",
"length": 1140.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-e70f361d",
"target": {
"function": "OJPEGWriteStreamDcTable",
"file": "libtiff/tif_ojpeg.c"
},
"deprecated": false,
"digest": {
"function_hash": "17516444575222152366704016798008153409",
"length": 380.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-e7647e2b",
"target": {
"function": "write_data_to_current_directory",
"file": "test/test_IFD_enlargement.c"
},
"deprecated": false,
"digest": {
"function_hash": "243188334193811929426225462028825939954",
"length": 1882.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-e86142c1",
"target": {
"function": "main",
"file": "tools/pal2rgb.c"
},
"deprecated": false,
"digest": {
"function_hash": "60997926411347948169330828497316643581",
"length": 4636.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-e94884b9",
"target": {
"function": "writeBufferToSeparateStrips",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "126739902075909540796753891809461229360",
"length": 2349.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-ea4c55cf",
"target": {
"function": "Ascii85EncodeBlock",
"file": "tools/tiff2ps.c"
},
"deprecated": false,
"digest": {
"function_hash": "115618000514538242581025640303258201636",
"length": 1465.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-eb0e98cb",
"target": {
"function": "testRGBAImageReadFunctions",
"file": "test/test_RGBAImage.c"
},
"deprecated": false,
"digest": {
"function_hash": "296375840904892188049440042230655999850",
"length": 1332.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-eb982bd6",
"target": {
"function": "TIFFBuildOverviews",
"file": "contrib/addtiffo/tif_overview.c"
},
"deprecated": false,
"digest": {
"function_hash": "129625329272221141825169719037226633582",
"length": 3359.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-ecbdc815",
"target": {
"function": "TIFFHashSetRemoveInternal",
"file": "libtiff/tif_hash_set.c"
},
"deprecated": false,
"digest": {
"function_hash": "319123154492795493298091116837743037576",
"length": 946.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-eea7e931",
"target": {
"function": "gtStripSeparate",
"file": "libtiff/tif_getimage.c"
},
"deprecated": false,
"digest": {
"function_hash": "900981944658941138553620366228369012",
"length": 3551.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-f05f4cd7",
"target": {
"file": "test/test_ifd_loop_detection.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"115813369398449656809546485408478184682",
"176780139955490562004297806523464066696",
"50043825585836106043395942871151364935",
"11596971491878073752601873809507498840",
"87925128308806205250683888045016914894",
"255238693859638889810435002697848889068",
"139883646496801740917055785563044426132",
"190829290207398926518981633029731405497",
"106434014708689718815496059535147987854",
"297610722814889555314432341519564539433",
"139883646496801740917055785563044426132",
"190829290207398926518981633029731405497"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-f08f3399",
"target": {
"file": "tools/raw2tiff.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"57248558322408199842487312344085721158",
"332955815015258235250109088339795585965",
"225236394312966942291789045449563659663",
"118652968049634490194761010629464837666",
"34173199872906102508376480867246309593",
"245892766677498732584978635595886234144",
"28580321175453366718739318495056086299",
"185797744174103623188912426716469892986",
"340052233022614118256398718572571638968",
"182640303012298889998690683997229335782",
"303706698088810171640082901930707955152",
"13476876002884569192097757122291014400",
"289025944908096012585791218597956050989",
"244998215767342583686367575326838898202",
"81406843828145062713943486180393305367",
"145012887187989876036168997433778479595",
"166853710562084394652439077307541012756",
"331519544800191026680944372564711824223",
"67880022132367455819089732990514958231",
"152554270830470898296369182529642144093",
"225280667201558560157508912431335347944",
"198191526221983498181675007173585062883",
"26202247111614205335389621481355090337",
"146627304759060158181100412741252674107",
"63851412353764879180085342857176149013",
"239582564215629398643195952099119948542",
"8625017963049363579596869342414433525",
"137095911994184431071725079695825512523",
"157256682899885615486295074189259713400",
"135119016758941075919496068752599277870",
"273873848459543843628027026753490278005",
"304669764506788043165212868408091805527",
"115527507318551058368216522035759296955",
"219731741266451460194401391772115721793",
"79677991682729765982939251944640167431",
"257309541991837640678485367587357397087",
"89915729956780900069814485417967688388",
"77495529470923056020573150447161962251",
"308123500704143628576734381583458843437",
"317047700051226286624588182826859733201",
"220775782855396801042981075899563410298",
"243276382936445599056654031976277611278",
"331744622340148865936369779410802376418",
"241037561976267440321912981858295418512",
"302595792400328123554703816316578014919",
"240279948006471741888916840231770678626",
"185720641113439519674731380909600598700",
"34685895794593956328997059208010451275",
"316983924004747940323928811312113138980",
"141607327949701629717437771588905014922",
"205101680533170927022514899941626660301",
"45621505566720680892612888571629212898",
"68081290306578460921974544708684883044",
"288064738989520267021395785329395169797",
"9093367598537891177321232098307405323",
"257669550969695240993879631613538928421",
"232384183729687035204962330534783702964",
"119418903039532979032729963213215236421",
"17176447078147634528441229495290734270",
"197326158558583974341837098896826668229",
"228809501313358460387214384054168765730",
"264885192449987725595526025114018875039",
"119518020700183195659678203428532277693",
"37637382816209565643219918152645342371",
"231342724040976243372219501123549777846",
"87794275146641393235067447983058422804"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-f114b8b0",
"target": {
"file": "tools/fax2tiff.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"217285518401254514466767519899131949176",
"192892906549646702522626415791964377101",
"83648925624633372043356745954854583445",
"158933171197582058343142202903564050632",
"123812671252749892168100387179002449350",
"260531992250991431277341420232564833289",
"177088417028891097010524384436333373610",
"96707037540127673600162218797142307485",
"104547862100656122031768778525168106431",
"98470909780512236479956311019095776898",
"116857917670514333618537025639520206544",
"137436716829994823895436174211773278548",
"148680784695438821147003329863855279815",
"280886996150509782363897052620215952740",
"45628423744152721581069764868588790067",
"21733718705032562773549603598252389784",
"18428086983152157163811358597549867659",
"189918696300854169172186645524832339618",
"330611455637827768034722617097903849523",
"105410813221623510936464580084364198931",
"15512449378886657228632302851890773037",
"233678996158243418775584154836400666115",
"107301327384847462558255540411285331048",
"232558060941415832311410405855869462839",
"185670531307543787339351581224152834773"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-f12f8839",
"target": {
"function": "t2p_readwrite_pdf_image_tile",
"file": "tools/tiff2pdf.c"
},
"deprecated": false,
"digest": {
"function_hash": "188176380001488369045269694427667785694",
"length": 13902.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-f15f782e",
"target": {
"function": "fsdither",
"file": "tools/tiffdither.c"
},
"deprecated": false,
"digest": {
"function_hash": "93427347669211923628459578717089618396",
"length": 2054.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-f2d7e58a",
"target": {
"function": "extractContigSamples24bits",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "297205889323185001535862921592996323238",
"length": 2111.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-f4b20f90",
"target": {
"function": "PrintData",
"file": "tools/tiffdump.c"
},
"deprecated": false,
"digest": {
"function_hash": "295774071684713513450936761705308453275",
"length": 3130.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-f5add77f",
"target": {
"function": "reverseSamples8bits",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "222616766890320142124431056147474174128",
"length": 1047.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-f62fc545",
"target": {
"function": "main",
"file": "tools/fax2tiff.c"
},
"deprecated": false,
"digest": {
"function_hash": "155895454033930477412724452685475216179",
"length": 7020.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-f6d87e23",
"target": {
"function": "processG3Options",
"file": "tools/tiffcp.c"
},
"deprecated": false,
"digest": {
"function_hash": "151166637299950541083666866732969321126",
"length": 471.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-f6dea02c",
"target": {
"file": "tools/rgb2ycbcr.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"57248558322408199842487312344085721158",
"332955815015258235250109088339795585965",
"41155257624860722690127343092375938777",
"64857212621202824232223101035975081808",
"298957572427216340489787318194276478297",
"105345841812028981311797869820648214182",
"294578685702154911942665864418366766630",
"252959510149296615752171337685329436044",
"288603089557310218354764029146357620202",
"279231293849383324849057286885603527450",
"101517767061627192014818875224928347310",
"59384983599504478970135778381244426711",
"321740025245796511582849072382114186732",
"302456821238159569828213960072987172537",
"46879094012121558869005685197879989399",
"331083878717523182120196757179206120682",
"290326139517481899799950847833531873308",
"5396590235855804069941674853382352023",
"255455989267877791981852703854763126748",
"226800547636885901426025878174398847089",
"199422916103145816161228463652319376083",
"208108503493564562145299307087296291140",
"29085079165955080533021893382332700900",
"85298815873112443443340879476787235054",
"9526957116936360569126170095121049281",
"102815094610300786408916992827895782260",
"150906454279054218376301751599321225558",
"160061424939822872917012224592974370609",
"75440127960013538130362254608975491109",
"200707159795602690662275675070487748427",
"283024829239497253668695241356699816752",
"184915120920390725286470613729381809448"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-f78da217",
"target": {
"file": "libtiff/tif_webp.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"12652024659593233455290165154963555739",
"86600530983648077396412253850348583969",
"265973018467799185550460959694683926646",
"67213483919482166205184583094202082962",
"116687304323353237553680727047597360074",
"40336265423842294232505969453743496726",
"105479168164461833883046598153281124942",
"212006762145828098822282197336674440748",
"97196261373375846973951784925295724685",
"174151018542178994622753669742461496674",
"235840851742490730264186505713183303063",
"293940021877311509162182645433782398963",
"257343342974178908443521140450766589727",
"238667078756330900638711302400834610030",
"275497222118385063407254817833440497325",
"132927279419573880601007115727538816343",
"251392107247445972936005924240605709588",
"21463789128439887605460241495963644063",
"319696654556287106789221902650660566027",
"200688860779917448025612966772929635177",
"209334194307203128514499651781798739411",
"274090111387504930646118479268386319711",
"69741291343834962470692414689906603596",
"7595625018006645794906493361269690807",
"124097441017158695480802197774565095852",
"290804615319892383271508213939076877473",
"89281893099009697230816967809257884305",
"113781149618706802661925698583783624874",
"38922601626831434879947486462269955494",
"305068139897797764046634727945099305353",
"222721418103598474764990296046875776061",
"22172097110639035701998849727362892818",
"265552078267105022075236837150593438252",
"279373568576617900532708271862490750706",
"169728496767084810926759476636049720349",
"109784051933204131188683599419313471123",
"77753653801242240644851480485184392004",
"26632492557694505324187184120212542099"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-f7919229",
"target": {
"function": "CheckShort2Tag",
"file": "tools/tiffcmp.c"
},
"deprecated": false,
"digest": {
"function_hash": "90970996312050988303563445169895025790",
"length": 642.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-f7c4f077",
"target": {
"function": "Fax3PutBits",
"file": "libtiff/tif_fax3.c"
},
"deprecated": false,
"digest": {
"function_hash": "84229997742192018304693743143949662315",
"length": 269.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-f7c68393",
"target": {
"function": "setupLumaTables",
"file": "tools/rgb2ycbcr.c"
},
"deprecated": false,
"digest": {
"function_hash": "222386321370458987027793426844124042782",
"length": 290.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-f92ae32a",
"target": {
"file": "libtiff/tif_fax3.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"91468481277183749472570927280484351984",
"16780017935707821609031070093748683437",
"124757211837733866726373590109279163678",
"104092973111100943722432780060204754007",
"102159144243516126224718376248242684690",
"177096048094135923020631083702993427398",
"55490378343689607886674765396358310662",
"327561680798657547682010044536120860465",
"256469311037091327051690187713217091637",
"27121671119229956564763496300845879099",
"295297582042855826313642695425005118328",
"115974453666497494678840627142165680722",
"269578858569572357755757879351550927489",
"125156882002249897007830719847082157378",
"287759748525354406578309150335601677221",
"59590508627424766838872209582163391295",
"319361784994737041179408356064493938552",
"179867119852943950510992205136570833130",
"42637024255035883041635244093871560737",
"254022695459581608875944645448543078901",
"73648992873788326451844623500736063218",
"297839692943308709315022222448384870971",
"216849707488752866339853241670413491584",
"117019543398952241428217167900916264939",
"302599410973802553145004968158561155021",
"314363777386810217579980114475928325143",
"180691505187432481818887126749456447973",
"155583090626709253201451835003846336817",
"322208733216346869673287883705094920868",
"122945551915622625713610666769898658822",
"177491387252317485588670046135925167770",
"260454104558467445390533110676841920727",
"62080605760090352577884311196917907187",
"106168351699923888426179665531340882449",
"140655016330075941109471722923331886052",
"125201459843345918660930840082274451599",
"226429387398481665071518437812289759176",
"77404837484677507492610437856749380275",
"86399569357540322834068047215891937648",
"272069551019643452929609272733402719094",
"261040457631243523427112196203101136062",
"56734338034242105611337403980970567620",
"242683696354957672077135965288420486615",
"177491387252317485588670046135925167770",
"294254841935900687962881780563185122403",
"253180477799125271565019005727497319932",
"148170349274302768464055487452917757835",
"131006767211418389765568091866722990749",
"181271135103863848595520540401720936305",
"199199194916972032040815420075667474204",
"289431440466629048427815342278948247000",
"292973484244518532244652675412507698540",
"181328002317049141616144370071904250974",
"101209289814504669007951856323380930570",
"236688992591491510902324267063824572606",
"66273053347089447073522052594024523938",
"130541407223032879790248411833680184549",
"4027700247054670517334970218005976737",
"235350850710957918906675713615301878939",
"11730856265560632945550373745234174200",
"253180477799125271565019005727497319932",
"148170349274302768464055487452917757835",
"131006767211418389765568091866722990749",
"181271135103863848595520540401720936305",
"109922551774880660241379193637853796507",
"196331681457366377042055756490191217034",
"288074421533418561020455263351469199293",
"181328002317049141616144370071904250974",
"101209289814504669007951856323380930570",
"285247526204651937131368582602547859500",
"139347726348369631289183157455239157083",
"212806875023480717618211971692252868599",
"209936771154790344802448412466136213821",
"164723475489607313630780058070331469059",
"101115419488104410440010563134209137888",
"75383695935706135482462770489933856796",
"305590453484531080563945697047002312051",
"83509436700883380801284044616173513080",
"6894474916149127626030892736908173400",
"196718223290499795997133007781361611832",
"206725864486078441963634008750471712413",
"296285093780300516852376990201259894543",
"80653846511625334611244295418100837942",
"55594777711793707162738061204007118336",
"15762670522082525382766823375349650563",
"17729081016264639449564264722452440910",
"174374916923636799644790462901717707069",
"64471760654216233627980715007903574489",
"206725864486078441963634008750471712413",
"86495917538757665506154323071976504169",
"292845832269242005343841263737302337387",
"69773736088243245457246207505681448668",
"192060450395366564946893492855733381414",
"306948731208449549833328037127435761926",
"181642845291235832998889535351806363818",
"17729081016264639449564264722452440910",
"291440135924029617192497377001018015611",
"68436349498293703139386927138372289565",
"206725864486078441963634008750471712413",
"221053787664040436124939390355942642453",
"172049421319323724668196564637007177766",
"163391100656542264980429407602223804493",
"24986538438360745172701912670549327116",
"326902501217253933246823711053024150251",
"108005671856714794384289505855079564466",
"14877194742664423017789368072358023188",
"99987865516154323416629161398036954692",
"165283780252722523175944244477127612253",
"181642845291235832998889535351806363818",
"17729081016264639449564264722452440910",
"222501137310603679742452667027762816557",
"294135398828603513437939922159363328969",
"41985213405702137001923643560273122834",
"113186506780020429521235083979491070722",
"212598289553755569029565915800058428153",
"229841711204398925613386520531280513253",
"20843747319226077072163805406661267034",
"54502673225647736170039250994131432549",
"289065018976520788006659779764224549528",
"315747544747789261673357625480986170762",
"64388054680872958072174550718582394923",
"137622864067378524246330509395476420613",
"62947242674979540559495073287340505664",
"229841711204398925613386520531280513253",
"20843747319226077072163805406661267034",
"54502673225647736170039250994131432549",
"210683838230635615309696931734754689684",
"313680938593158010891707018575316983720",
"40720937228091166568995094277396303437",
"59812481518971142253765295308123807116",
"10639238824058630086225666581393031154",
"240236618734007039683859240218457928824",
"71042482886691565336161953719242942821",
"224354827725937781312422231775817989461",
"313696322615988317374155530152499930547",
"58026413765189694794367829052028890121",
"155146622875106915010416274024698842444",
"240236618734007039683859240218457928824",
"274316353102900684913896234264536363061",
"17463129011470924035709155321596439161",
"270194740782313400892783479618659176845",
"314010665976421227831374934142779370032",
"116156719229572810544626518650717335185",
"126017070698955736558822541921278954146",
"188587948546547246779577107931563806885",
"2199447139300360587317959513453756726",
"212086529871018837347263356547164391693",
"227913795604000932874383182440006608058",
"90300185080653128933350636679501012716",
"228643877456648317351573487124107008261",
"214231880848905134478635894413425227719",
"211152049718283196304253235848133439559",
"305639762801418383436463406323108994532",
"221609914718615658914698793722767970764",
"13109944766600692376753235072448393648",
"104425959653457399629183595149210758938",
"185000037333232174439587975996237155170",
"20811131265596685781934670084748230796",
"291278445055472718169489869514636638236",
"116687304323353237553680727047597360074",
"242870227432773476716739503879297602223",
"281069105072448133869976761707245889870",
"34748028931566006266280331549534596172",
"149892146352693901856445120679235694830",
"135941434148998676149506994712211108384",
"127650137800718997265958773480953345130",
"165402278127317216706269604152689780502",
"154987965454979017964506573029834834643",
"28217849536440426004241541466558800211",
"122498517715174104934635776081832382716",
"197222075778368087175555197786926802347",
"262610948749843802023042188020465991673",
"117542682665587668540451606555085945285",
"52029793412502069724304698293187440010",
"239716309015002919790018434739754508113",
"255550465761450456815222830810296288132",
"128910133741065465515551332445175751473",
"101487278865375702792183617147399895337",
"102765135062930474936771241222707389685",
"34870140478880525186735099190221678791",
"128910133741065465515551332445175751473",
"122554096031292686196019807337077504162",
"79589286084152449053896633046311422962",
"267807630861355426449653426289481250918",
"332939003686825578333833137099002424663",
"232333681500396325653079857846213596972",
"118114745319797516482337224791493000807",
"167024114184543612355698586320460980604",
"73005183064645616074945290146591848502",
"80032257009278344714791775045542310300",
"231515259384157653530473842663739463746",
"177491387252317485588670046135925167770"
]
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Line"
},
{
"id": "CVE-2026-52492-f986515e",
"target": {
"function": "setWindowSize",
"file": "tools/tiffgt.c"
},
"deprecated": false,
"digest": {
"function_hash": "45361940424355871679317752791966716046",
"length": 65.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-f9e7333f",
"target": {
"function": "readContigTilesIntoBuffer",
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"digest": {
"function_hash": "318137970645838663748282292293256195617",
"length": 4526.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-fad211d1",
"target": {
"function": "ZSTDPostEncode",
"file": "libtiff/tif_zstd.c"
},
"deprecated": false,
"digest": {
"function_hash": "217201055619841422402712912529779734517",
"length": 556.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-fba4561b",
"target": {
"function": "read_all_tags",
"file": "test/test_write_read_tags.c"
},
"deprecated": false,
"digest": {
"function_hash": "51686116456633443779512235979733601999",
"length": 12065.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-fc0a883d",
"target": {
"function": "LZWDecode",
"file": "libtiff/tif_lzw.c"
},
"deprecated": false,
"digest": {
"function_hash": "306527654938952303368856289459927736327",
"length": 5729.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-fc2f7e0e",
"target": {
"function": "OJPEGReadHeaderInfoSecTablesDcTable",
"file": "libtiff/tif_ojpeg.c"
},
"deprecated": false,
"digest": {
"function_hash": "338283486182789667263003349276719134105",
"length": 1895.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-fc80796e",
"target": {
"function": "Fax3DecodeRLE",
"file": "libtiff/tif_fax3.c"
},
"deprecated": false,
"digest": {
"function_hash": "103358063026647243204771837544712398077",
"length": 1243.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-fc8af3e3",
"target": {
"function": "main",
"file": "tools/raw2tiff.c"
},
"deprecated": false,
"digest": {
"function_hash": "290043627479659197406419490185258609504",
"length": 7058.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-fe237b41",
"target": {
"function": "JPEGEncodeRaw",
"file": "libtiff/tif_jpeg.c"
},
"deprecated": false,
"digest": {
"function_hash": "262755883590446518752430170966718830684",
"length": 1932.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-fe54ea48",
"target": {
"function": "PSRawDataBW",
"file": "tools/tiff2ps.c"
},
"deprecated": false,
"digest": {
"function_hash": "307234016251876732538369536286539970835",
"length": 1840.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
},
{
"id": "CVE-2026-52492-ff10e7bf",
"target": {
"function": "TIFFReadAndRealloc",
"file": "libtiff/tif_read.c"
},
"deprecated": false,
"digest": {
"function_hash": "293996314740051092085946247493739667684",
"length": 2175.0
},
"signature_version": "v1",
"source": "https://gitlab.com/libtiff/libtiff@94affc5cf54111312f9891eb77accb93eebc28d7",
"signature_type": "Function"
}
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-52492.json"
vanir_signatures_modified
"2026-08-29T08:12:56Z"