CVE-2026-52492

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...

ROOT-OS-DEBIAN-13-CVE-2025-61143 CVE-2025-61143 in tiff - Patched by Root

Root has patched CVE-2025-61143 in the tiff package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-61144 CVE-2025-61144 in tiff - Patched by Root

Root has patched CVE-2025-61144 in the tiff package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-36849 CVE-2026-36849 in tiff - Patched by Root

Root has patched CVE-2026-36849 in the tiff package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-61145 CVE-2025-61145 in tiff - Patched by Root

Root has patched CVE-2025-61145 in the tiff package for Root:Debian:13. Multiple fixed versions available...

libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT8BITABGR output format and a specific stride value, leading to a heap-base...

CVE-2026-52492

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...

EUVD-2026-65145

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...

ROOT-OS-DEBIAN-11-CVE-2025-8177 CVE-2025-8177 in tiff - Patched by Root

Root has patched CVE-2025-8177 in the tiff package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2023-52355 CVE-2023-52355 in tiff - Patched by Root

Root has patched CVE-2023-52355 in the tiff package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2022-40090 CVE-2022-40090 in tiff - Patched by Root

Root has patched CVE-2022-40090 in the tiff package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-36849 CVE-2026-36849 in tiff - Patched by Root

Root has patched CVE-2026-36849 in the tiff package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-12912 CVE-2026-12912 in tiff - Patched by Root

Root has patched CVE-2026-12912 in the tiff package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-61145 CVE-2025-61145 in tiff - Patched by Root

Root has patched CVE-2025-61145 in the tiff package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-8176 CVE-2025-8176 in tiff - Patched by Root

Root has patched CVE-2025-8176 in the tiff package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2023-6277 CVE-2023-6277 in tiff - Patched by Root

Root has patched CVE-2023-6277 in the tiff package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-61144 CVE-2025-61144 in tiff - Patched by Root

Root has patched CVE-2025-61144 in the tiff package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-70651

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built without libtiff support but with ImageMagick support can overflow the combined frame height while loading a crafted multi-page TIFF through VipsForeignLoadMagick. The vulnerable calculations i...

CVE-2026-69242

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, a crafted many-band TIFF processed through VipsForeignLoadTiff can evade scanline validation in libvips/iofuncs/image.c and cause an integer overflow in vipsimagesanity. The resulting buffer-region...

DEBIAN-CVE-2026-69242

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, a crafted many-band TIFF processed through VipsForeignLoadTiff can evade scanline validation in libvips/iofuncs/image.c and cause an integer overflow in vipsimagesanity. The resulting buffer-region...