exploit_CVE-2023-0297

This repository does not have a README...

CVE-2023-52356-libtiff-analysis

CVE-2023-52356 – libtiff TIFFReadRGBATileExt Analysis Overview This lab analyzes CVE-2023-52356 in libtiff, focusing on the behavior of TIFFReadRGBATileExt when it receives image coordinates outside the valid image bounds. The analysis includes reproduction of the original crash, debugging with...

PoC

PoC refered p0 A PoC of CVE-2017-0411...

CVE-2026-128067

Pillow is a Python imaging library. From 2.3.0 through 12.3.0, Pillow applications that save compressed TIFF images through libtiff can pass attacker-controlled image geometry tags to the encoder while allocating its row buffer from the actual image dimensions. The affected TiffImagePlugin.save...

CVE-2026-128067: python-pillow Pillow: Pillow is a Python imaging library

Pillow is a Python imaging library. From 2.3.0 through 12.3.0, Pillow applications that save compressed TIFF images through libtiff can pass attacker-controlled image geometry tags to the encoder while allocating its row buffer from the actual image dimensions. The affected TiffImagePlugin.save...

GHSA-XCVG-W56Q-R89M Pillow: Heap buffer overflow saving TIFF with libtiff when tags override image size

============================================================================ ANT-2026-CS7N494P high CWE-787 memory-safety Heap buffer overflow saving TIFF with libtiff when tags override image size Location: src/libImaging/TiffDecode.c:1035 in ImagingLibTiffEncode Commit:...

Pillow: Heap buffer overflow saving TIFF with libtiff when tags override image size

============================================================================ ANT-2026-CS7N494P high CWE-787 memory-safety Heap buffer overflow saving TIFF with libtiff when tags override image size Location: src/libImaging/TiffDecode.c:1035 in ImagingLibTiffEncode Commit:...

CVE-2026-128067 Pillow: Heap buffer overflow saving TIFF with libtiff when tags override image size

Pillow is a Python imaging library. From 2.3.0 through 12.3.0, Pillow applications that save compressed TIFF images through libtiff can pass attacker-controlled image geometry tags to the encoder while allocating its row buffer from the actual image dimensions. The affected TiffImagePlugin.save...

CVE-2026-128067

The Pillow Python imaging library (versions 2.3.0 through 12.3.0 ) is vulnerable to a heap buffer overflow when saving compressed TIFF images using libtiff . The root cause is that the TiffImagePlugin._save path allows attacker-controlled image geometry tags (such as ImageWidth, ImageLength, or S...

CVE-2026-128067 Pillow: Heap buffer overflow saving TIFF with libtiff when tags override image size

Pillow is a Python imaging library. From 2.3.0 through 12.3.0, Pillow applications that save compressed TIFF images through libtiff can pass attacker-controlled image geometry tags to the encoder while allocating its row buffer from the actual image dimensions. The affected TiffImagePlugin.save...

EUVD-2026-124778

Pillow is a Python imaging library. From 2.3.0 through 12.3.0, Pillow applications that save compressed TIFF images through libtiff can pass attacker-controlled image geometry tags to the encoder while allocating its row buffer from the actual image dimensions. The affected TiffImagePlugin.save...

CVE-2026-128067

Pillow is a Python imaging library. From 2.3.0 through 12.3.0, Pillow applications that save compressed TIFF images through libtiff can pass attacker-controlled image geometry tags to the encoder while allocating its row buffer from the actual image dimensions. The affected TiffImagePlugin.save...

CVE-2025-55891

CVE-2025-55891: Heap Corruption in TIFFCP.EXE docuPrinter Pro via Malformed TIFF File Summary A heap corruption vulnerability exists in TIFFCP.EXE, a command-line utility bundled with Neevia docuPrinter Pro, due to the use of an outdated and vulnerable version of libtiff v3.5.7. By supplying a...

PT-2026-146093

Name of the Vulnerable Software and Affected Versions Pillow versions 2.3.0 through 12.3.0 Description Applications using this Python imaging library to save compressed TIFF images via libtiff may pass attacker-controlled image geometry tags to the encoder. The TiffImagePlugin. save path allows t...

libtiff: libtiff: Arbitrary code execution via process_command_opts() function

A flaw was found in libtiff. An attacker can exploit a vulnerability in the processcommandopts function within tools/tiffcrop.c to execute arbitrary code. This could lead to a complete compromise of the affected system...

Important: Red Hat Security Advisory: libtiff security update

An update for libtiff is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

RHEL 7 : libtiff (RHSA-2026:99062)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:99062 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Arbitrar...

TencentOS Server 3: python-pillow (TSSA-2026:1430)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1430 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Unity Linux 20.1070e Security Update: libtiff (UTSA-2026-151027)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-151027 advisory. An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the processcommandopts function in tools/tiffcrop.c...

Important: python-pillow

Issue Overview: Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while determining the frame count of a MIC image. MicImageFile inherits TIFF frame traversal, but MicImageFile.tell reports the OLE stream index and its seek resets TIFF frame state, so ...