Lucene search
+L

7950 matches found

OSV
OSV
added 2025/11/25 10:18 p.m.8 views

JLSEC-2025-322 A weakness has been identified in LibTIFF 4.7.0

A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to the public and could be exploited...

4.8CVSS6.5AI score0.00206EPSS
SaveExploits1References7
OSV
OSV
added 2025/11/25 10:18 p.m.8 views

JLSEC-2025-317 A vulnerability was found in LibTIFF up to 4.7.0

A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function gethistogram of the file tools/tiffmedian.c. The manipulation leads to use after free. The attack needs to be approached locally. The exploit has been disclosed to the publi...

7.8CVSS5.5AI score0.00242EPSS
SaveExploits1References7
OSV
OSV
added 2025/11/25 10:18 p.m.13 views

JLSEC-2025-279 LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in `tools/tiffcrop.c:6905`, allowing...

LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 48d6ece8...

5.5CVSS6.5AI score0.00566EPSS
SaveExploits1References5
OSV
OSV
added 2025/11/25 10:18 p.m.12 views

JLSEC-2025-299 LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in `tools/tiffcrop.c:3516`, allowing attackers...

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127...

5.5CVSS6.7AI score0.00428EPSS
SaveExploits1References7
OSV
OSV
added 2025/11/25 10:18 p.m.6 views

JLSEC-2025-278 libtiff's tiffcrop tool has a `uint32_t` underflow which leads to out of bounds read and write in...

libtiff's tiffcrop tool has a uint32t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering...

5.5CVSS6.7AI score0.00317EPSS
SaveExploits0References3
OSV
OSV
added 2025/11/25 10:18 p.m.10 views

JLSEC-2025-261 Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in...

Null source pointer passed as an argument to memcpy function within TIFFReadDirectory in tifdirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, a fix is available with commit 561599c...

5.5CVSS6.3AI score0.0125EPSS
SaveExploits1References8
OSV
OSV
added 2025/11/25 10:18 p.m.11 views

JLSEC-2025-309 There exists one heap buffer overflow in `_TIFFmemcpy` in `tif_unix.c` in libtiff 4.0.10, which...

There exists one heap buffer overflow in TIFFmemcpy in tifunix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file...

5.5CVSS6.7AI score0.00277EPSS
SaveExploits1References1
OSV
OSV
added 2025/11/25 10:18 p.m.11 views

JLSEC-2025-307 A null pointer dereference issue was found in Libtiff's `tif_dir.c` file

A null pointer dereference issue was found in Libtiff's tifdir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will result in an application crash, eventually leading to a denial o...

5.5CVSS6.7AI score0.00422EPSS
SaveExploits1References7
OSV
OSV
added 2025/11/25 10:18 p.m.9 views

JLSEC-2025-323 A flaw has been found in LibTIFF 4.7.0

A flaw has been found in LibTIFF 4.7.0. This affects the function TIFFmallocExt/TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of the component tiffcmp. Executing manipulation can lead to memory leak. The attack is restricted to local execution. This attack is...

2.5CVSS5.6AI score0.00217EPSS
SaveExploits1References10
OSV
OSV
added 2025/11/25 10:18 p.m.8 views

JLSEC-2025-315 An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to...

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64 API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB...

7.5CVSS8AI score0.01829EPSS
SaveExploits1References10
OSV
OSV
added 2025/11/25 10:18 p.m.7 views

JLSEC-2025-266 Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via...

Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f8d0f9aa...

5.5CVSS6.5AI score0.0133EPSS
SaveExploits1References8
OSV
OSV
added 2025/11/25 10:18 p.m.4 views

JLSEC-2025-296 LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in `libtiff/tif_unix.c:368`, invoked by...

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tifunix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee12...

5.5CVSS6.7AI score0.00428EPSS
SaveExploits1References7
OSV
OSV
added 2025/11/25 10:18 p.m.9 views

JLSEC-2025-320 A vulnerability classified as problematic was found in libtiff 4.6.0

A vulnerability classified as problematic was found in libtiff 4.6.0. This vulnerability affects the function PSLvl2page of the file tools/tiff2ps.c of the component tiff2ps. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The complexity ...

2.5CVSS4.5AI score0.00185EPSS
SaveExploits1References8
OSV
OSV
added 2025/11/25 10:18 p.m.13 views

JLSEC-2025-252 An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in...

An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tifdirwrite.c in LibTIFF 4.0.10, affecting the cpSeparateBufToContigBuf function in tiffcp.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted tiff file...

6.5CVSS6.1AI score0.03372EPSS
SaveExploits1References8
OSV
OSV
added 2025/11/25 10:18 p.m.12 views

JLSEC-2025-308 A flaw was found in libtiff

A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tiffax3.c, resulting in a denial of service...

6.5CVSS6.8AI score0.01188EPSS
SaveExploits0References8
OSV
OSV
added 2025/11/25 10:18 p.m.12 views

JLSEC-2025-311 An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause...

An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file...

6.5CVSS8.7AI score0.00939EPSS
SaveExploits1References2
OSV
OSV
added 2025/11/25 10:18 p.m.8 views

JLSEC-2025-290 LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in `tools/tiffcrop.c:3488`, allowing attackers...

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e...

5.5CVSS6.5AI score0.00421EPSS
SaveExploits1References7
OSV
OSV
added 2025/11/25 10:18 p.m.13 views

JLSEC-2025-258 A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's...

A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

7.8CVSS7.5AI score0.01851EPSS
SaveExploits0References8
OSV
OSV
added 2025/11/25 10:18 p.m.7 views

JLSEC-2025-276 libtiff's tiffcrop utility has a `uint32_t` underflow that can lead to out of bounds read and write....

libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop likely via tricking a user to run tiffcrop on it with certain parameters could cause a crash or in some cases, further exploitation...

5.5CVSS6.8AI score0.00317EPSS
SaveExploits0References3
OSV
OSV
added 2025/11/25 10:18 p.m.10 views

JLSEC-2025-269 Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service...

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd...

5.5CVSS6.7AI score0.01093EPSS
SaveExploits1References5
Rows per page
Query Builder