Lucene search
K

7 matches found

OSV
OSV
added 2025/11/25 10:18 p.m.2 views

JLSEC-2025-306 loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a craft...

loadImage in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image...

5.5CVSS8.2AI score0.00009EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2024/09/10 12:0 a.m.13 views

NewStart CGSL MAIN 6.02 : compat-libtiff3 Vulnerability (NS-SA-2024-0055)

The remote NewStart CGSL host, running version MAIN 6.02, has compat-libtiff3 packages installed that are affected by a vulnerability: - A heap use-after-free vulnerability was found in LibTIFF's tiffcrop utility in the loadImage function. This flaw allows an attacker to pass a crafted TIFF image...

5.5CVSS6.8AI score0.00009EPSS
Exploits1References3
Microsoft CVE
Microsoft CVE
added 2023/06/19 7:0 a.m.2 views

loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.

...

5.5CVSS7.1AI score0.00009EPSS
Exploits1
OSV
OSV
added 2023/06/14 9:15 p.m.1 views

DEBIAN-CVE-2023-26965

loadImage in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image...

5.5CVSS6.7AI score0.00009EPSS
Exploits1References1
OSV
OSV
added 2023/06/14 9:15 p.m.0 views

UBUNTU-CVE-2023-26965

loadImage in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image...

5.5CVSS7AI score0.00009EPSS
Exploits1References5
CNVD
CNVD
added 2016/04/14 12:0 a.m.2 views

Silicon Graphics LibTiff tiffcrop Tool Denial of Service Vulnerability

Silicon Graphics LibTiff is a library for reading and writing TIFF Tagged Image File Format files from the U.S. Silicon Graphics. The library contains a number of command-line tools to deal with TIFF files. tiffcrop tool is a set of tools used to convert TIFF files . A security vulnerability exis...

7.8CVSS8.8AI score0.00444EPSS
Exploits0References1
Symantec
Symantec
added 2004/12/20 12:0 a.m.15 views

Microsoft Windows LoadImage API Function Integer Overflow Vulnerability

Description Microsoft Windows is prone to a remote integer-overflow vulnerability because it fails to properly ensure that user-supplied input doesn't overflow integer values. Attackers may exploit this issue to cause data to be copied past the end of a memory buffer. This issue resides in the...

7.8AI score
Exploits0References2Affected Software8
Rows per page
Query Builder