CVE-2022-1056

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd...

CVE-2020-18768

There exists one heap buffer overflow in TIFFmemcpy in tifunix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file...

CVE-2020-18768

There exists one heap buffer overflow in TIFFmemcpy in tifunix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file...

LibTIFF 安全漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A security vulnerability exists in LibTIFF versions prior to 4.4.0, which stems from a security flaw in the function TIFFReadDirectory libtif...

CVE-2022-40090

An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file...

CVE-2020-18768

There exists one heap buffer overflow in TIFFmemcpy in tifunix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file...

The vulnerability of the decode_iptc_iim() function in the OpenImageIO image processing library allows a hacker to gain access to confidential data.

The vulnerability of the decodeiptciim function in the OpenImageIO image processing library is related to reading data from within the allowable buffer limits. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data through a specially created TIFF file...

Medium: libtiff

Issue Overview: A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input. CVE-2022-2520 libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read...

Ffmpeg code issue vulnerability (CNVD-2025-02574)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version 4.3, which stems from a flaw in the decodeframe function in the libavcodec/tiff.c file. No details of the vulnerability are available at th...

CVE-2021-28427

Buffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIFF file...

XNView Security Vulnerability

XnView is a suite of multi-platform image viewing software from the French individual developer Gougelet Pierre-emmanuel. The software can be used to view, convert, organize and edit graphics and video files. A security vulnerability exists in XNView version 2.49.3, which stems from the presence ...

CVE-2021-28427

Buffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIFF file...

CVE-2021-28427

CVE-2021-28427 affects XNView 2.49.3 with a buffer overflow in TIFF handling, enabling local attackers to execute arbitrary code via a crafted TIFF file. remediation: update to a fixed version (per PT-2023-12127) or apply vendor guidance; as a temporary workaround, avoid using crafted TIFF files....

Siemens JT2Go < 14.2.0.5 Multiple Vulnerabilities (SSA-131450)

The version of Siemens JT2Go installed on the remote Windows hosts is prior to 14.2.0.5. It is, therefore, affected by multiple vulnerabilities: - Use-after-free vulnerability that can be triggered while parsing a specially crafted ASM file. An attacker can leverage this vulnerability to execute...

ImageMagick < 6.9.12-93 / 7.1.1.0 < 7.1.1-15 Buffer Overflow Condition

The remote Windows host has a version of ImageMagick installed that is prior to 6.9.12-26 or 7.1.1-0 before 7.1.1-11. It is, therefore, affected by a buffer overflow condition in ImageMagick's coders/tiff.c. This flaw allows an attacker to trick the user into opening a specially crafted malicious...

CVE-2023-38683

A vulnerability has been identified in JT2Go All versions V14.2.0.5, Teamcenter Visualization V13.2 All versions V13.2.0.14, Teamcenter Visualization V14.1 All versions V14.1.0.10, Teamcenter Visualization V14.2 All versions V14.2.0.5. The affected application contains an out of bounds write past...

Design/Logic Flaw

A vulnerability has been identified in JT2Go All versions V14.2.0.5, Teamcenter Visualization V13.2 All versions V13.2.0.14, Teamcenter Visualization V14.1 All versions V14.1.0.10, Teamcenter Visualization V14.2 All versions V14.2.0.5. The affected application contains an out of bounds write past...

CVE-2023-38683

A vulnerability has been identified in JT2Go All versions V14.2.0.5, Teamcenter Visualization V13.2 All versions V13.2.0.14, Teamcenter Visualization V14.1 All versions V14.1.0.10, Teamcenter Visualization V14.2 All versions V14.2.0.5. The affected application contains an out of bounds write past...

CVE-2023-38683

The CVE-2023-38683 entry concerns Siemens JT2Go and Teamcenter Visualization. Affected products are JT2Go (all versions before 14.2.0.5) and Teamcenter Visualization (V13.2 before 13.2.0.14, V14.1 before 14.1.0.10, V14.2 before 14.2.0.5). The vulnerability is an out-of-bounds write past the end o...

CVE-2023-38683

A vulnerability has been identified in JT2Go All versions V14.2.0.5, Teamcenter Visualization V13.2 All versions V13.2.0.14, Teamcenter Visualization V14.1 All versions V14.1.0.10, Teamcenter Visualization V14.2 All versions V14.2.0.5. The affected application contains an out of bounds write past...