Lucene search
+L

194 matches found

AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•13 views

Astra Linux – Vulnerability in exiv2

In Exiv2 0.26, there is a null pointer dereference in the Exiv2::DataValue::toLong function located in value.cpp. This issue is related to crafted metadata in a TIFF file...

5.5CVSS6.7AI score0.008EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2026/08/06 9:25 p.m.•16 views

CVE-2026-70631

FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the native TIFF decoder in libavcodec/tiff.c. An attacker who can cause FFmpeg to decode a crafted TIFF file can supply a valid Deflate-compressed strip that terminates...

6.8CVSS6AI score0.00178EPSS
SaveExploits0References5Affected Software1
RedHat Linux
RedHat Linux
•added 2026/08/05 12:56 p.m.•20 views

Important: Red Hat Security Advisory: libtiff security update

An update for libtiff is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.3CVSS6.1AI score0.00433EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/08/03 1:40 p.m.•15 views

Important: Red Hat Security Advisory: libtiff security, bug fix, and enhancement update

An update for libtiff is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

7.5CVSS6.7AI score0.01829EPSS
SaveExploits1References3
OSV
OSV
•added 2026/07/30 4:02 p.m.•13 views

JLSEC-2026-1073 ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the TIFF encoder when memory...

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the TIFF encoder when memory allocation fails. Attackers can trigger allocation failures during TIFF image processing to cause memory exhaustion and denial of service...

2.9CVSS5.5AI score0.00139EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/29 12:00 a.m.•31 views

PT-2026-65960

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A stack-based buffer overflow exists during the parsing of TIF files. The issue occurs because the software fails to properly validate the length of user-supplied data before copying it to a...

7.8CVSS8AI score0.00423EPSS
SaveExploits0References78
Positive Technologies
Positive Technologies
•added 2026/07/29 12:00 a.m.•23 views

PT-2026-65962

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw in the parsing of TIF files allows remote attackers to execute arbitrary code. The issue occurs due to insufficient validation of user-supplied data, leading to an integer overflow—a...

7.8CVSS7.9AI score0.00469EPSS
SaveExploits0References77
Positive Technologies
Positive Technologies
•added 2026/07/29 12:00 a.m.•28 views

PT-2026-65964

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A heap-based buffer overflow exists during the parsing of TIF files. The issue occurs because the software fails to properly validate the length of user-supplied data before copying it to a...

7.8CVSS7.9AI score0.00423EPSS
SaveExploits0References77
Positive Technologies
Positive Technologies
•added 2026/07/29 12:00 a.m.•24 views

PT-2026-65965

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw in the parsing of TIF files allows remote attackers to execute arbitrary code. The issue occurs due to insufficient validation of user-supplied data, leading to an integer overflow—a...

7.8CVSS7.9AI score0.00469EPSS
SaveExploits0References69
AlmaLinux
AlmaLinux
•added 2026/07/28 12:00 a.m.•19 views

Important: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image CVE-2026-12912 For more details about the security issues, including the impact, a CVSS...

7.3CVSS6.2AI score0.00433EPSS
SaveExploits0References4
OSV
OSV
•added 2026/07/24 2:30 p.m.•16 views

GHSA-6VXP-GFWF-HCR9 ImageMagick: Memory Leak in TIFF encoder when a temporary file could not be created.

When a temporary file can not be created a small memory leak will happen in the TIFF encoder...

2.9CVSS5.6AI score0.00187EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/07/24 2:30 p.m.•22 views

ImageMagick: Memory Leak in TIFF encoder when a temporary file could not be created.

When a temporary file can not be created a small memory leak will happen in the TIFF encoder...

5.8AI score
SaveExploits0References3Affected Software17
OSV
OSV
•added 2026/07/22 12:05 p.m.•15 views

RLSA-2026:41892 Important: libtiff security, bug fix, and enhancement update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM CVE-2023-52355 libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF ima...

7.5CVSS6.8AI score0.01829EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/07/22 12:00 a.m.•19 views

RHEL 9 : libtiff (RHSA-2026:43537)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:43537 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff:...

7.5CVSS6.6AI score0.01829EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2026/07/21 12:31 p.m.•20 views

Important: Red Hat Security Advisory: libtiff security update

An update for libtiff is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

7.3CVSS6.1AI score0.00433EPSS
SaveExploits0References2
Fedora
Fedora
•added 2026/07/21 1:16 a.m.•14 views

[SECURITY] Fedora 43 Update: libtiff-4.7.2-1.fc43

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

7.8CVSS6.4AI score0.00433EPSS
SaveExploits0
Fedora
Fedora
•added 2026/07/18 12:28 a.m.•20 views

[SECURITY] Fedora 44 Update: libtiff-4.7.2-1.fc44

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

7.8CVSS6.4AI score0.00433EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/07/16 9:38 a.m.•17 views

CVE-2026-61863

A flaw was found in ImageMagick. When processing a Tagged Image File Format TIFF image, a small memory leak can occur if the TIFF encoder is unable to create a temporary file. This can lead to a gradual consumption of system memory, potentially impacting the availability of the application...

7.5CVSS5.4AI score0.00187EPSS
SaveExploits0References5
Snyk
Snyk
•added 2026/07/15 2:36 p.m.•14 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

2.5CVSS5.7AI score0.00096EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/15 2:36 p.m.•18 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

2.5CVSS5.7AI score0.00096EPSS
SaveExploits0References2
Rows per page
Query Builder