CVE-2026-54604 is a vulnerability in OpenSlide, a C library for reading whole slide image files. A behavior change in libtiff 4.7.1 causes the indirect TIFF tile path to request a full-height destination for a partial bottom tile row, allowing uninitialized heap memory to enter pixel data returned by openslide_read_region(). A crafted but valid slide can trigger the issue in TIFF-based formats other than [truncated]
CVE-2026-48977 OpenSlide vulnerability debrief. OpenSlide, a C library for reading whole slide image files, has a vulnerability in its parse_level0_xml() processing. A crafted Ventana BIF file can cause nonpositive row or column tile counts, leading to attacker-controlled relative memory offsets and potential arbitrary code execution. This issue affects all supported platforms and configurations, and is f [truncated]
