Vulnerability Description
OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parse_level0_xml() processing in src/openslide-vendor-ventana.c accepts nonpositive row or column tile counts from a crafted Ventana BIF file. The invalid counts produce attacker-controlled relative memory offsets and allow arbitrary values to be written at those offsets, affecting all supported platforms and configurations and resulting in a crash or potential arbitrary code execution. This issue is fixed in version 4.0.1.
Related Weaknesses (CWE)
References
- https://github.com/openslide/openslide/commit/2be88bd782d9fff46de8e56a99baca523e
- https://github.com/openslide/openslide/pull/751
- https://github.com/openslide/openslide/releases/tag/v4.0.1
- https://github.com/openslide/openslide/security/advisories/GHSA-mxg2-48g7-fmwc
FAQ
What is CVE-2026-48977?
CVE-2026-48977 is a documented vulnerability. OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parse_level0_xml() processing in src/openslide-vendor-ventana.c accepts nonpositive row or column tile...
How severe is CVE-2026-48977?
CVSS scoring is not yet available for CVE-2026-48977. Check NVD for updates.
Is there a patch for CVE-2026-48977?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.