CVE-2016-3620

The ZIPEncode function in tifzip.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c zip" option is used, allows remote attackers to cause a denial of service buffer over-read via a crafted BMP image...

CVE-2016-3658

The TIFFWriteDirectoryTagLongLong8Array function in tifdirwrite.c in the tiffset tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via vectors involving the ma variable...

CVE-2016-3619

CVE-2016-3619 affects LibTIFF: the DumpModeEncode path in bmp2tiff (tif_dumpmode.c) of LibTIFF 4.0.6 and earlier allows a remote user to trigger a denial of service via a crafted BMP image (buffer over-read). Public docs confirm a fixed version in LibTIFF 4.0.7, with Apple updating LibTIFF in AKC...

CVE-2016-3631

The 1 cpStrips and 2 cpTiles functions in the thumbnail tool in LibTIFF 4.0.6 and earlier allow remote attackers to cause a denial of service out-of-bounds read via vectors related to the bytecounts array variable...

CVE-2016-3625

tifread.c in the tiff2bw tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via a crafted TIFF image...

CVE-2016-3622

CVE-2016-3622 affects LibTIFF 4.0.6 and earlier, specifically the fpAcc function in tif_predict.c used by tiff2rgba, which can cause a denial of service via a crafted TIFF image due to division by zero. The impact is a DoS; no other outcomes are stated in the provided documents. Remediation guida...

CVE-2016-3633

The setrow function in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via vectors related to the src variable...

CVE-2016-3658

The TIFFWriteDirectoryTagLongLong8Array function in tifdirwrite.c in the tiffset tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via vectors involving the ma variable...

CVE-2016-3620

The ZIPEncode function in tifzip.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c zip" option is used, allows remote attackers to cause a denial of service buffer over-read via a crafted BMP image...

CVE-2016-3622

The fpAcc function in tifpredict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service divide-by-zero error via a crafted TIFF image...

CVE-2016-3624

The cvtClump function in the rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds write by setting the "-v" option to -1...

CVE-2016-3621

The LZWEncode function in tiflzw.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c lzw" option is used, allows remote attackers to cause a denial of service buffer over-read via a crafted BMP image...

CVE-2016-3658

The TIFFWriteDirectoryTagLongLong8Array function in tifdirwrite.c in the tiffset tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via vectors involving the ma variable...

CVE-2016-3622

The fpAcc function in tifpredict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service divide-by-zero error via a crafted TIFF image...

CVE-2016-3621

CVE-2016-3621 affects LibTIFF 4.0.6 and earlier, where the LZWEncode function in tif_lzw.c (bmp2tiff tool, using -c lzw) may cause a denial of service via a crafted BMP image (buffer over-read). The connected security notes confirm this vector and link multiple advisories, with upstream fixes rea...

CVE-2016-3633

CVE-2016-3633 affects LibTIFF up to version 4.0.6: the setrow function in the thumbnail tool can trigger a denial-of-service via an out-of-bounds read when processing a crafted image. Several connected advisories confirm the issue across libtiff/thumbnail tooling and mandate upgrading to a fixed ...

CVE-2016-3623

The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service divide-by-zero by setting the 1 v or 2 h parameter to 0...

CVE-2016-3658

CVE-2016-3658 affects LibTIFF 4.0.6 and earlier, where TIFFWriteDirectoryTagLongLong8Array in tif_dirwrite.c (tiffset tool) enables remote out-of-bounds reads, causing denial of service. Mitigation: upgrade LibTIFF to 4.0.7 or newer (see Debian/Arch advisories and upstream fixes).

CVE-2016-3634

CVE-2016-3634 affects LibTIFF up to version 4.0.6. The vulnerability exists in the tagCompare function in tif_dirinfo.c used by the thumbnail tool, causing an out-of-bounds read and potential crash (denial of service). Remediation per connected advisories is to upgrade to LibTIFF 4.0.7 or newer.

CVE-2016-3619

The DumpModeEncode function in tifdumpmode.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c none" option is used, allows remote attackers to cause a denial of service buffer over-read via a crafted BMP image...