AZL-27303 CVE-2023-26966 affecting package libtiff for versions less than 4.5.1-1

libtiff 4.5.0 is vulnerable to Buffer Overflow in uvencode when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian...

AZL-27165 CVE-2023-26965 affecting package libtiff for versions less than 4.5.1-1

loadImage in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image...

AZL-27166 CVE-2023-25434 affecting package libtiff for versions less than 4.5.1-1

libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes at /libtiff/tools/tiffcrop.c:3215...