AZL-78333 CVE-2025-61145 affecting package libtiff for versions less than 4.6.0-11

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c...

AZL-78311 CVE-2025-61144 affecting package libtiff for versions less than 4.6.0-12

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function...

CVE-2025-61143

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tifopen.c...

CVE-2025-61145

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c...

UBUNTU-CVE-2025-61143

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tifopen.c...

CVE-2025-61144

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function...

UBUNTU-CVE-2025-61145

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c...

UBUNTU-CVE-2025-61144

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function...

CVE-2025-61144

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function...

CVE-2025-61143

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tifopen.c...

CVE-2025-61143

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tifopen.c...

CVE-2025-61145

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c...

CVE-2025-61144

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function...

CVE-2025-61143

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tifopen.c...

LibTIFF 安全漏洞

LibTIFF is an open-source library for reading and writing TIFF Tagged Image File Format files. This library includes some command-line tools for processing TIFF files. Versions of LibTIFF prior to v4.7.1 have security vulnerabilities, which stem from a stack overflow vulnerability in the...

LibTIFF 安全漏洞

LibTIFF is an open-source library for reading and writing TIFF Tagged Image File Format files. This library includes some command-line tools for processing TIFF files. Versions of LibTIFF prior to v4.7.1 have security vulnerabilities, which stem from a null pointer dereferencing in the component...

CVE-2025-61143

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tifopen.c...

CVE-2025-61145

CVE-2025-61145 affects libtiff up to 4.7.1, with a double free in tools/tiffcrop.c. The vulnerability exposes a memory corruption risk (availability impact High) and is described as locally exploitable with low complexity; user interaction is required. The documents provide no definitive fixed ve...

CVE-2025-61145

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the tifopen.c. An attacker can cause a crash of the application by triggering a NULL pointer dereference through crafted input files. Remediation Upgrade libtiff to version 4.7.1 or higher. References - GitLa...