Security update for tiff

This update for tiff fixes the following issues: CVE-2025-8176: Fixed heap use-after-free in tools/tiffmedian.c bsc1247108 CVE-2025-8177: Fixed possible buffer overflow in tools/thumbnail.c:setrow when processing malformed TIFF files bsc1247106 Patch Instructions: To install this SUSE update use...

SUSE-SU-2023:0342-1 Security update for tiff

This update for tiff fixes the following issues: - CVE-2022-48281: Fixed a buffer overflow that could be triggered via a crafted image bsc1207413...

SUSE-SU-2018:3911-2 Security update for tiff

This update for tiff fixes the following issues: Security issues fixed: - CVE-2018-12900: Fixed heap-based buffer overflow in the cpSeparateBufToContigBuf bsc1099257. - CVE-2018-18661: Fixed NULL pointer dereference in the function LZWDecode in the file tiflzw.c bsc1113672. - CVE-2018-18557: Fixe...

FreeBSD : tiff -- buffer overflow (c17fe91d-4aa6-11e6-a7bd-14dae9d210b8)

Henri Salo reports : buffer overflow in gif2tiff tool %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2016 Jacques Vidrine and contributors Redistribution and use in source...

LibTIFF DoS

The vulnerability in the tifluv.c function of the LibTIFF library arises due to buffer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure logging outside the buffer’s limit by using an improperly compressed TIFF image...

PT-2016-4397

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 3.1.1 Description The issue allows remote attackers to overwrite memory via a crafted TIFF file, exploiting a buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c. Recommendations For version...

Microsoft GDI+ TIFF Buffer Overflow (MS09-062; CVE-2009-2502)

The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer. A remote code execution vulnerability has been discovered in the way that GDI+ allocates memory. The vulnerability is due to an error when GDI+ fail...