LibTIFF Buffer Overflow Vulnerability

LibTIFF is LibTIFF open source a library to read and write TIFF Tagged Image File Format files , the library contains a number of command-line tools to deal with TIFF files . LibTIFF has a buffer overflow vulnerability that originates from an incorrect operation of the file tiffcrop.c, which can ...

CVE-2025-9165

LibTIFF 4.7.0 contains a local, memory-leak flaw in tiffcmp.c (InitCCITTFax3 via _TIFFmallocExt/_TIFFCheckRealloc/TIFFHashSetNew). The vulnerability is described as high complexity with published exploitability, though there is ongoing doubt about the issue’s existence. A patch is available (ed14...

OESA-2025-2050 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

OESA-2025-2049 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

[SECURITY] Fedora 42 Update: libtiff-4.7.0-7.fc42

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

CVE-2025-8961 LibTIFF tiffcrop tiffcrop.c main memory corruption

A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to the public and could be exploited...

CVE-2025-8961 LibTIFF tiffcrop tiffcrop.c main memory corruption

A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to the public and could be exploited...

LibTIFF 资源管理错误漏洞

LibTIFF is a LibTIFF open source library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A resource management error vulnerability exists in LibTIFF version 4.7.0 and earlier, which stems from the existence of...

Linux Distros Unpatched Vulnerability : CVE-2023-30775

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c. CVE-2023-30775 Not...

Linux Distros Unpatched Vulnerability : CVE-2022-0891

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory...

Linux Distros Unpatched Vulnerability : CVE-2022-3570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via craft...

Advisory ROSA-SA-2025-2582

software: libtiff 4.1.0 OS: ROSA-CHROME packageevrstring: libtiff-4.1.0-8 CVE-ID: CVE-2024-7006 BDU-ID: 2024-06610 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the LibTIFF library involves null pointer dereferencing via tifdirinfo.c. Exploitation of the vulnerability could allow an attacker...

PT-2024-5544 · Libtiff +1 · Libtiff +1

Name of the Vulnerable Software and Affected Versions: LibTIFF affected versions not specified Description: The issue is related to the TIFFReadEncodedStrip function in the LibTIFF library, which is associated with an uncontrolled resource consumption. This can be exploited by a remote attacker t...

Number withdrawn

LibTIFF is a LibTIFF open source library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command line tools for working with TIFF files. This CVE number has been withdrawn...

The vulnerability of the TIFFOpen() function in the LibTIFF API library, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the TIFFOpen function in the LibTIFF library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

LibTIFF Security Vulnerability

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A security vulnerability exists in LibTIFF, which stems from a lack of memory, where passing a carefully crafted tiff file to the TIFFOpen AP...

The vulnerability of the TIFFClose() function in the LibTIFF library, which allows a hacker to cause a service failure

The vulnerability of the TIFFClose function in the LibTIFF library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the raw2tiff.c component in the LibTIFF library, which allows a hacker to cause a service failure

The vulnerability of the raw2tiff.c component in the LibTIFF library is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created tiff image...

UBUNTU-CVE-2023-3576

A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an application crash, eventually leading to a denia...

The vulnerability of the tiffcrop utility (tools/tiffcrop.c:3592) in the LibTIFF library, which allows a hacker to cause a service failure

The vulnerability of the tiffcrop utility tools/tiffcrop.c:3592 is related to the LibTIFF library. LibTIFF and its libraries involve reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...