Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash potential information disclosure or any other context-dependent impact

🗓️ 22 Oct 2022 07:00:00Reported by MicrosoftType

Multiple heap buffer overflows in libtiff 4.4.0 tiffcrop.c allow crafted TIFF images to cause crashes or information disclosure.

Reporter	Title	Published	Views	Family All 155
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.1-IF004 (June 2025)	2 Jul 202507:00	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	3 Jun 202511:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Libtiff	28 Feb 202422:19	–	ibm
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for June 2025.	16 Jul 202509:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service and loss of confidentiality due to multiple vulnerabilities in libtiff	27 Jul 202315:49	–	ibm
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for January 2026.	23 Feb 202609:25	–	ibm
Tenable Nessus	Amazon Linux 2023 : libtiff, libtiff-devel, libtiff-static (ALAS2023-2024-634)	28 May 202400:00	–	nessus
Tenable Nessus	AlmaLinux 9 : libtiff (ALSA-2023:2340)	14 May 202300:00	–	nessus
Tenable Nessus	CentOS 9 : libtiff-4.4.0-7.el9	29 Feb 202400:00	–	nessus
Tenable Nessus	Debian dla-3278 : libtiff-dev - security update	21 Jan 202300:00	–	nessus