24 matches found
MiracleLinux 7 : libtiff-4.0.3-25.el7 (AXSA:2016-598:01)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-598:01 advisory. The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file...
JLSEC-2025-312 LibTIFF is vulnerable to an integer overflow
LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service application crash or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow...
EUVD-2016-1457
Malware in sbrugna...
EUVD-2006-4495
Malware in sbrugna...
EUVD-2010-2600
Malware in sbrugna...
EUVD-2016-1456
Malware in sbrugna...
EUVD-2014-7971
Malware in sbrugna...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libtiff (UTSA-2025-680603)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680603 advisory. Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TI...
EUVD-2023-34354
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2016-3625
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tifread.c in the tiff2bw tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via a crafted TIFF image...
Important: libtiff
Issue Overview: Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other...
USN-6163-1 pano13 vulnerabilities
It was discovered that pano13 did not properly validate the prefix provided for PTcrop's output. An attacker could use this issue to cause pano13 to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18....
SUSE CVE-2018-7456
A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tifprint.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 when using the tiffinfo tool to...
AZL-11283 CVE-2022-3570 affecting package libtiff for versions less than 4.4.0-5
Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact...
LibRaw 'LibRaw::panasonic_load_raw()' function heap buffer overflow vulnerability
LibRaw is a C++ library developed by the LibRaw team for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. A heap buffer overflow vulnerability exists in the 'LibRaw::panasonicloadraw' function in the dcrawcommon.cpp file in LibRaw versions prior to 0.18.6. A remote attacker can...
Foxit Reader and PhantomPDF Denial of Service Vulnerability (CNVD-2016-10514)
Foxit Reader is a PDF document reader from China's Foxit Software Corporation.Foxit PhantomPDF is a commercial version. A denial of service vulnerability exists in the ConvertToPDF plug-in in Foxit Reader and PhantomPDF versions prior to 8.1 on Windows-based platforms. When the gflags application...
MGASA-2016-0349 The updated packages fix libtiff security vulnerabilities
The TIFFVGetField function in tifdir.c in libtiff 4.0.6 allows attackers to cause a denial of service invalid memory write and crash or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image. CVE-2015-7554 Heap-based buffer overflow in the...
DEBIAN-CVE-2016-3632
The TIFFVGetField function in tifdirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via a crafted TIFF image...
Silicon Graphics LibTiff Denial of Service Vulnerability (CNVD-2016-02301)
Silicon Graphics LibTiff is the United States Silicon Graphics, Inc. of a read and write TIFF Tagged Image File Format file library. A denial of service vulnerability exists in the NeXTDecode function in Silicon Graphics LibTiff's tifnext.c file, which can be exploited by remote attackers to caus...