7814 matches found
Write-what-where Condition
Overview Affected versions of this package are vulnerable to Write-what-where Condition in the TIFFReadRGBAImageOriented function while processing paletted images with malformed metadata. TIFF file. An attacker can achieve arbitrary memory write by convincing a user to open a specially crafted TI...
LibTIFF 安全漏洞
LibTIFF is a LibTIFF open source library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A security vulnerability exists in LibTIFF that stems from the ability to perform arbitrary write operations...
CVE-2025-8851 affecting package libtiff for versions less than 4.6.0-8
CVE-2025-8851 affecting package libtiff for versions less than 4.6.0-8. A patched version of the package is available...
CVE-2025-9165 affecting package libtiff for versions less than 4.6.0-8
CVE-2025-9165 affecting package libtiff for versions less than 4.6.0-8. A patched version of the package is available...
Medium: libtiff
Issue Overview: A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack...
Moderate Photon OS Security Update - PHSA-2025-4.0-0870
Updates of 'libtiff' packages of Photon OS have been released...
Amazon Linux 2 : libtiff, --advisory ALAS2-2025-2991 (ALAS-2025-2991)
The version of libtiff installed on the remote host is prior to 4.0.3-35. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2991 advisory. A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the...
Low: libtiff
Issue Overview: A flaw has been found in LibTIFF 4.7.0. This affects the function TIFFmallocExt/TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of the component tiffcmp. Executing manipulation can lead to memory leak. The attack is restricted to local execution. The...
Amazon Linux 2023 : libtiff, libtiff-devel, libtiff-static (ALAS2023-2025-1176)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1176 advisory. A flaw has been found in LibTIFF 4.7.0. This affects the function TIFFmallocExt/TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of the component tiffcmp. Executing manipulatio...
LibTIFF fax2ps tiff2pdf.c t2p_read_tiff_init null pointer dereference
...
CLSA-2025-1757666692 libtiff: Fix of CVE-2017-9117
CVE-2017-9117: add checks for all BMP reading operations to avoid buffer overflow...
Memory Leakage
Libtiff.so is vulnerable to Memory Leak. The vulnerability is due to improper memory management due to flaws in the TIFFmallocExt, TIFFCheckRealloc, TIFFHashSetNew, and InitCCITTFax3 functions in tiffcmp.c, which allow local attackers to trigger memory leaks...
OPENSUSE-SU-2025:15541-1 libtiff-devel-32bit-4.7.0-9.1 on GA media
These are all security issues fixed in the libtiff-devel-32bit-4.7.0-9.1 package on the GA media of openSUSE Tumbleweed...
Medium: libtiff
Issue Overview: A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack...
Medium: libtiff
Issue Overview: A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function gethistogram of the file tools/tiffmedian.c. The manipulation leads to use after free. The attack needs to be approached locally. The exploit has been...
Amazon Linux 2023 : libtiff, libtiff-devel, libtiff-static (ALAS2023-2025-1153)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1153 advisory. A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function gethistogram of the file tools/tiffmedian.c. The manipulation leads to use...
Amazon Linux 2023 : libtiff, libtiff-devel, libtiff-static (ALAS2023-2025-1164)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1164 advisory. A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads ...
CVE-2025-8534 affecting package libtiff for versions less than 4.6.0-7
CVE-2025-8534 affecting package libtiff for versions less than 4.6.0-7. A patched version of the package is available...