Advisory ROSA-SA-2026-3273

software: libtiff 4.1.0 OS: ROSA-CHROME unaffected versions = libtiff-4.1.0-10 affected versions libtiff-4.1.0-10 CVE-ID: CVE-2025-61143 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A null pointer dereferencing vulnerability in libtiff before version 4.7.1 via the tifopen.c component allows to cause ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libtiff (UTSA-2026-014369)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014369 advisory. libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function. Tenable has extracted the preceding description block...

Photon OS 4.0: Libtiff PHSA-2026-4.0-0984

An update of the libtiff package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0984. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Libtiff PHSA-2026-5.0-0794

An update of the libtiff package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0794. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

ROOT-OS-DEBIAN-13-CVE-2025-61144 CVE-2025-61144 in rootio-tiff - Patched by Root

Root has patched CVE-2025-61144 in the rootio-tiff package for Root:Debian:13. Multiple fixed versions available...

Amazon Linux 2023 : libtiff, libtiff-devel, libtiff-static (ALAS2023-2026-1498)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1498 advisory. libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tifopen.c. CVE-2025-61143 libtiff up to v4.7.1 was discovered to contain a stack overflow vi...

Important: libtiff

Issue Overview: libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tifopen.c. CVE-2025-61143 libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function. CVE-2025-61144 Affected Packages: libtiff...

Ubuntu: Security Advisory (USN-8113-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: libtiff

Issue Overview: libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tifopen.c. CVE-2025-61143 libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function. CVE-2025-61144 Affected Packages: libtiff...

Amazon Linux 2 : compat-libtiff3, --advisory ALAS2-2026-3195 (ALAS-2026-3195)

The version of compat-libtiff3 installed on the remote host is prior to 3.9.4-12. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3195 advisory. libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tifopen.c...

CLSA-2026-1772574874 libtiff: Fix of CVE-2025-61144

CVE-2025-61144: fix stack-based buffer overflow occurs in tiffcrop...

CVE-2025-61144 affecting package libtiff for versions less than 4.6.0-12

CVE-2025-61144 affecting package libtiff for versions less than 4.6.0-12. A patched version of the package is available...

CVE-2025-61144 affecting package libtiff for versions less than 4.6.0-12

CVE-2025-61144 affecting package libtiff for versions less than 4.6.0-12. A patched version of the package is available...

DEBIAN-CVE-2025-61144

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function...