EUVD-2026-93557

ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the TIFF CCITT Group 4 T6 encoding process. An attacker can cause process termination and denial of service by supplying a specially crafted 1x1 Group 4 TIFF image that, when decoded and re-encoded, triggers...

CVE-2026-106115

ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2, the TIFF CCITT Group 4 encoder allocates Width times rowsPerStrip bytes even though T6BitCompressor.CompressStrip can emit encoded row data and two 12-bit end-of-facsimile-block codes beyond that capacity. TiffCcittCompressor.WriteCode...

CVE-2026-106115

ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2, the TIFF CCITT Group 4 encoder allocates Width times rowsPerStrip bytes even though T6BitCompressor.CompressStrip can emit encoded row data and two 12-bit end-of-facsimile-block codes beyond that capacity. TiffCcittCompressor.WriteCode...

CVE-2026-106115 ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer

ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2, the TIFF CCITT Group 4 encoder allocates Width times rowsPerStrip bytes even though T6BitCompressor.CompressStrip can emit encoded row data and two 12-bit end-of-facsimile-block codes beyond that capacity. TiffCcittCompressor.WriteCode...

PT-2026-106832

Name of the Vulnerable Software and Affected Versions ImageSharp versions 2.1.0 through 4.1.1 Description The TIFF CCITT Group 4 encoder in this 2D graphics library allocates memory based on Width times rowsPerStrip bytes. However, the T6BitCompressor.CompressStrip function can produce encoded ro...

CVE-2026-106115: Out-of-bounds Write

ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2, the TIFF CCITT Group 4 encoder allocates Width times rowsPerStrip bytes even though T6BitCompressor.CompressStrip can emit encoded row data and two 12-bit end-of-facsimile-block codes beyond that capacity. TiffCcittCompressor.WriteCode...

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. A heap-based buffer overflow flaw was found in the way libtiff processed certain TIFF Internet Fax image files, compressed with the CCITT Group 4 compression algorithm. An attacker could use this flaw to create a specially-crafted TIFF file that,...

Oracle Linux 5 / 6 : libtiff (ELSA-2011-0392)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0392 advisory. - Fix incorrect fix for CVE-2011-0192 Resolves: 688829 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Scientific Linux Security Update : libtiff on SL4.x, SL5.x i386/x86_64

A heap-based buffer overflow flaw was found in the way libtiff processed certain TIFF Internet Fax image files, compressed with the CCITT Group 4 compression algorithm. An attacker could use this flaw to create a specially crafted TIFF file that, when opened, would cause an application linked...

Scientific Linux Security Update : libtiff on SL4.x i386/x86_64

A heap-based buffer overflow flaw was found in the way libtiff processed certain TIFF files encoded with a 4-bit run-length encoding scheme from ThunderScan. An attacker could use this flaw to create a specially crafted TIFF file that, when opened, would cause an application linked against libtif...

Scientific Linux Security Update : libtiff on SL5.x i386/x86_64

A heap-based buffer overflow flaw was found in the way libtiff processed certain TIFF files encoded with a 4-bit run-length encoding scheme from ThunderScan. An attacker could use this flaw to create a specially crafted TIFF file that, when opened, would cause an application linked against libtif...

CentOS Update for libtiff CESA-2011:0318 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Heap overflow

Heap-based buffer overflow in ImageIO in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF image with CCITT Group 4 encoding...

CVE-2011-0241

Heap-based buffer overflow in ImageIO in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF image with CCITT Group 4 encoding...

CVE-2011-0241

CVE-2011-0241: Heap-based buffer overflow in ImageIO used by Apple Safari’s TIFF handling (CCITT Group 4) could allow remote code execution or a denial of service. Affected vendor/product: Apple Safari on macOS with ImageIO before Safari 5.0.6. The underlying issue is a buffer overflow when proce...

PT-2011-2216

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0.6 Description A heap-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted TIFF image with CCITT Group 4 encoding. Recommendations...

Debian DSA-2210-1 : tiff - several vulnerabilities

Several vulnerabilities were discovered in the TIFF manipulation and conversion library : - CVE-2011-0191 A buffer overflow allows to execute arbitrary code or cause a denial of service via a crafted TIFF image with JPEG encoding. This issue affects the Debian 5.0 Lenny package only. -...

DSA-2210-1 tiff - several

Bulletin has no description...

Mandriva Linux Security Advisory : libtiff (MDVSA-2011:043)

A buffer overflow was discovered in libtiff which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF image with CCITT Group 4 encoding CVE-2011-0192. Additionally it was discovered that the fixes for CVE-2009-2347 and CVE-2010-2065...