OESA-2025-2191 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

OESA-2025-2190 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

LibTIFF tiffmedian.c get_histogram use after free

...

LibTIFF tiffcrop tiffcrop.c main memory corruption

...

LibTIFF thumbnail.c setrow buffer overflow

...

LibTIFF tiffcrop tiffcrop.c readSeparateStripsetoBuffer stack-based overflow

...

libtiff tiff2ps tiff2ps.c PS_Lvl2page null pointer dereference

...

LibTIFF tiffcmp tiffcmp.c InitCCITTFax3 memory leak

...

Segmentation fault in fax3encode in libtiff/tif_fax3.c

...

Medium: compat-libtiff3

Issue Overview: A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack...

Amazon Linux 2 : compat-libtiff3, --advisory ALAS2-2025-2986 (ALAS-2025-2986)

The version of compat-libtiff3 installed on the remote host is prior to 3.9.4-12. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2986 advisory. A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer ...

Stack-based Buffer Overflow

libtiff.so is vulnerable to Stack-based Buffer Overflow. The vulnerability is due to insufficient validation in the readSeparateStripsToBuffer function in tiffcrop.c, allowing attackers to trigger a buffer overflow...

Linux Distros Unpatched Vulnerability : CVE-2022-1354

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped function. This flaw allows an attacker to pass a crafted TIFF file to th...

Linux Distros Unpatched Vulnerability : CVE-2025-8961

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lea...

Linux Distros Unpatched Vulnerability : CVE-2025-9165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in LibTIFF 4.7.0. This affects the function TIFFmallocExt/TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of the...

Linux Distros Unpatched Vulnerability : CVE-2025-8851

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the...

Linux Distros Unpatched Vulnerability : CVE-2023-1916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the...

Fedora 42 : libtiff (2025-ac7b2513a8)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-ac7b2513a8 advisory. - fix CVE-2025-9165: memory leak in tiffcmp rhbz2389608 Tenable has extracted the preceding description block directly from the Fedora security advisory. Not...

Fedora: Security Advisory (FEDORA-2025-ac7b2513a8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-5869edf3de)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...