CVE-2025-61144

CVE-2025-61144: libtiff up to v4.7.1 contains a stack overflow in readSeparateStripsIntoBuffer. Connected advisories (Unity Linux, SUSE, Amazon Linux, Ubuntu, Photon OS, etc.) confirm libtiff exposure and indicate fixed versions in their security updates. Affected: libtiff up to 4.7.1 on multiple...

CVE-2025-61144

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the tifopen.c. An attacker can cause a crash of the application by triggering a NULL pointer dereference through crafted input files. Remediation Upgrade libtiff to version 4.7.1 or higher. References - GitLa...

CVE-2025-61143

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tifopen.c...

CVE-2025-61145

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c...

CVE-2025-61145

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c...

CVE-2025-61143

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tifopen.c...

LibTIFF 安全漏洞

LibTIFF is an open-source library for reading and writing TIFF Tagged Image File Format files. This library includes some command-line tools for processing TIFF files. Versions of LibTIFF prior to v4.7.1 have security vulnerabilities, which stem from a double-freeing issue in the tools/tiffcrop.c...

CVE-2025-61143

CVE-2025-61143 and CVE-2025-61144 affect libtiff up to 4.7.1, causing NULL pointer dereference (tif_open.c) and stack overflow (readSeparateStripsIntoBuffer). Connected advisories indicate multiple vendors released fixes (e.g., Mageia MGASA-2026-0105, SUSE SU-2026-1407/1408, Amazon ALAS2-2026-319...

Photon OS 4.0: Libtiff PHSA-2026-4.0-0959

An update of the libtiff package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0959. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Libtiff PHSA-2026-5.0-0757

An update of the libtiff package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0757. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Critical Photon OS Security Update - PHSA-2026-4.0-0959

Updates of 'ImageMagick', 'linux', 'libtiff' packages of Photon OS have been released...

Low Photon OS Security Update - PHSA-2026-5.0-0757

Updates of 'libtiff' packages of Photon OS have been released...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2026-1180)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2026-1129)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.10.0 : libtiff (EulerOS-SA-2026-1180)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the fi...

EulerOS Virtualization 2.10.1 : libtiff (EulerOS-SA-2026-1129)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the fi...

Astra Linux – Vulnerability in Tiff

A flaw has been discovered in LibTIFF 4.7.0. This flaw affects the functions TIFFmallocExt/TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 in the file tools/tiffcmp.c of the tiffcmp component. Performing certain manipulations can lead to a memory leak. The attack is limited to local execution. This...

Astra Linux – Vulnerability in Tiff

A memory-related flaw was discovered in libtiff. Passing a specially crafted TIFF file to the TIFFOpen API may allow a remote attacker to cause a denial of service by using a crafted input with a size smaller than 379 KB...

Astra Linux – Vulnerability in Tiff

Libtiff 4.5.0 is vulnerable to Buffer Overflow issues through /libtiff/tools/tiffcrop.c:8499. Incorrect updates to the buffer size after calling rotateImage in tiffcrop cause a heap-buffer-overflow and Segmentation Fault...