Lucene search
K

20 matches found

OSV
OSV
added 2025/10/09 3:11 p.m.1 views

CLSA-2025-1760022663 libtiff: Fix of CVE-2017-5225

CVE-2017-5225: fix heap buffer overflow in tools/tiffcp by restricting BitsPerSample values...

9.8CVSS6AI score0.00724EPSS
Exploits1References1
OSV
OSV
added 2025/09/26 2:18 p.m.4 views

CLSA-2025-1758896312 libtiff: Fix of CVE-2017-5225

CVE-2017-5225: fix heap buffer overflow in tools/tiffcp by restricting BitsPerSample values...

9.8CVSS7.1AI score0.00724EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2023/02/15 4:50 a.m.1 views

SUSE CVE-2017-5225

LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value...

9.8CVSS8.1AI score0.00724EPSS
Exploits1References6
SUSE CVE
SUSE CVE
added 2023/02/15 4:26 a.m.1 views

SUSE CVE-2018-12459

An inconsistent bits-per-sample value in the ffmpeg4decodepictureheader function in libavcodec/mpeg4videodec.c in FFmpeg 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service...

6.5CVSS6.8AI score0.00257EPSS
Exploits0References3
OSV
OSV
added 2021/07/08 12:15 p.m.0 views

CVE-2021-21794

An out-of-bounds write vulnerability exists in the TIF bitspersample processing functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

7.8CVSS5.8AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2021/07/08 12:0 a.m.2 views

PT-2021-14779 · Accusoft · Accusoft Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 19.9 Description: An out-of-bounds write issue exists in the TIF bits per sample processing functionality. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file t...

9.8CVSS8.6AI score0.00237EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/06/01 12:0 a.m.3 views

Accusoft ImageGear 缓冲区错误漏洞

Accusoft ImageGear is a multi-platform, multi-language document imaging developer toolkit. An out-of-bounds write vulnerability exists in the TIF bitspersample handling function in Accusoft ImageGear version 19.9. An attacker can exploit the vulnerability via a specially crafted file to cause...

9.8CVSS5.6AI score0.00237EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2018/06/15 3:29 p.m.19 views

CVE-2018-12459

An inconsistent bits-per-sample value in the ffmpeg4decodepictureheader function in libavcodec/mpeg4videodec.c in FFmpeg 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service...

6.5CVSS6.6AI score0.00257EPSS
Exploits0References2
NVD
NVD
added 2018/06/15 3:29 p.m.8 views

CVE-2018-12459

An inconsistent bits-per-sample value in the ffmpeg4decodepictureheader function in libavcodec/mpeg4videodec.c in FFmpeg 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service...

6.5CVSS6.3AI score0.00257EPSS
Exploits0References1
OSV
OSV
added 2018/06/15 3:29 p.m.12 views

CVE-2018-12459

An inconsistent bits-per-sample value in the ffmpeg4decodepictureheader function in libavcodec/mpeg4videodec.c in FFmpeg 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service...

6.5CVSS6.6AI score
Exploits0References1
OSV
OSV
added 2018/06/15 3:29 p.m.2 views

DEBIAN-CVE-2018-12459

An inconsistent bits-per-sample value in the ffmpeg4decodepictureheader function in libavcodec/mpeg4videodec.c in FFmpeg 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service...

6.5CVSS6.8AI score0.00257EPSS
Exploits0References1
OSV
OSV
added 2017/01/12 11:59 a.m.1 views

DEBIAN-CVE-2017-5225

LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value...

9.8CVSS8.4AI score0.00724EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2016/10/03 12:0 a.m.21 views

CVE-2016-3622

The fpAcc function in tifpredict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service divide-by-zero error via a crafted TIFF image...

6.5CVSS7AI score0.00906EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2016/08/02 4:39 p.m.2 views

libtiff: out-of-bounds read/write with malformed TIFF image in tiff2pdf

LibTIFF 4.0.3 allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by failure of tifnext.c to verify that the BitsPerSample value is 2, and the t2psamplelabsignedtounsigned function in tiff2pdf...

8.8CVSS7.5AI score0.01462EPSS
Exploits1References4
OSV
OSV
added 2014/12/31 12:0 a.m.1 views

UBUNTU-CVE-2014-8129

LibTIFF 4.0.3 allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by failure of tifnext.c to verify that the BitsPerSample value is 2, and the t2psamplelabsignedtounsigned function in tiff2pdf...

8.8CVSS7AI score0.01462EPSS
Exploits1References4
Prion
Prion
added 2014/03/02 4:57 a.m.18 views

Out-of-bounds

The takdecodeframe function in libavcodec/takdec.c in FFmpeg before 2.1.4 does not properly validate a certain bits-per-sample value, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted TAK aka Tom's lossless...

6.8CVSS7.6AI score0.00583EPSS
Exploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2014/03/02 4:57 a.m.2 views

CVE-2014-2097

The takdecodeframe function in libavcodec/takdec.c in FFmpeg before 2.1.4 does not properly validate a certain bits-per-sample value, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted TAK aka Tom's lossless...

6.8CVSS5.9AI score0.00583EPSS
Exploits1References4
OSV
OSV
added 2011/03/28 4:55 p.m.2 views

DEBIAN-CVE-2011-1167

Heap-based buffer overflow in the thunder aka ThunderScan decoder in tifthunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value...

6.8CVSS9.5AI score0.05526EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2006/01/15 12:0 a.m.19 views

Ubuntu 4.10 / 5.04 : tiff vulnerability (USN-130-1)

Tavis Ormandy discovered a buffer overflow in the TIFF library. A malicious image with an invalid 'bits per sample' number could be constructed which, when decoded, would have resulted in execution of arbitrary code with the privileges of the process using the library. Since this library is used ...

7.5CVSS6.1AI score0.15653EPSS
Exploits0References1
securityvulns
securityvulns
added 2005/05/19 12:0 a.m.25 views

libtiff TIFF graphics library buffer overflow

Buffer overflow on invalid bits per sample value...

3.7AI score
Exploits0References1Affected Software1
Rows per page
Query Builder