Lucene search
+L

8899 matches found

Vulnrichment
Vulnrichment
•added 2025/09/23 4:26 p.m.•12 views

CVE-2025-9900 Libtiff: libtiff write-what-where

A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's metadata, an attacker can trick the library into writing attacker-controll...

8.8CVSS7.3AI score0.0097EPSS
SaveExploits0References37
OSV
OSV
•added 2025/09/23 4:26 p.m.•13 views

CVE-2025-9900 Libtiff: libtiff write-what-where

A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's metadata, an attacker can trick the library into writing attacker-controll...

8.8CVSS7AI score
SaveExploits0References44
attackerkb
attackerkb
•added 2025/09/23 4:26 p.m.•59 views

CVE-2025-9900

A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's metadata, an attacker can trick the library into writing attacker-controll...

8.8CVSS6.3AI score0.0097EPSS
SaveExploits0References38
Debian CVE
Debian CVE
•added 2025/09/23 4:26 p.m.•11 views

CVE-2025-9900

A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's metadata, an attacker can trick the library into writing attacker-controll...

8.8CVSS6.7AI score0.0097EPSS
SaveExploits0
OSV
OSV
•added 2025/09/23 4:20 p.m.•14 views

CLSA-2025-1758644444 libtiff: Fix of 2 CVEs

CVE-2025-8176: fix use after free in tools/tiffmedian.c - CVE-2025-8177: fix buffer overflow in tools/thumbnail.c...

7.8CVSS6.6AI score0.00287EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/23 12:00 a.m.•2 views

CVE-2025-9900: Write-what-where Condition

A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's metadata, an attacker can trick the library into writing attacker-controll...

8.8CVSS6.8AI score0.0097EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/09/22 2:29 p.m.•11 views

Write-what-where Condition

Overview Affected versions of this package are vulnerable to Write-what-where Condition in the TIFFReadRGBAImageOriented function while processing paletted images with malformed metadata. TIFF file. An attacker can achieve arbitrary memory write by convincing a user to open a specially crafted TI...

8.8CVSS6.7AI score0.0097EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/09/22 2:29 p.m.•18 views

Write-what-where Condition

Overview Affected versions of this package are vulnerable to Write-what-where Condition in the TIFFReadRGBAImageOriented function while processing paletted images with malformed metadata. TIFF file. An attacker can achieve arbitrary memory write by convincing a user to open a specially crafted TI...

8.8CVSS4.6AI score0.0097EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/09/22 12:00 a.m.•15 views

LibTIFF 安全漏洞

LibTIFF is a LibTIFF open source library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A security vulnerability exists in LibTIFF that stems from the ability to perform arbitrary write operations...

8.8CVSS5.8AI score0.0097EPSS
SaveExploits0References7
CBLMariner
CBLMariner
•added 2025/09/18 3:12 p.m.•7 views

CVE-2025-9165 affecting package libtiff for versions less than 4.6.0-8

CVE-2025-9165 affecting package libtiff for versions less than 4.6.0-8. A patched version of the package is available...

2.5CVSS6.9AI score0.00219EPSS
SaveExploits1
CBLMariner
CBLMariner
•added 2025/09/18 3:12 p.m.•9 views

CVE-2025-8851 affecting package libtiff for versions less than 4.6.0-8

CVE-2025-8851 affecting package libtiff for versions less than 4.6.0-8. A patched version of the package is available...

5.3CVSS6.9AI score0.00181EPSS
SaveExploits0
Amazon
Amazon
•added 2025/09/16 12:00 a.m.•9 views

Medium: libtiff

Issue Overview: A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack...

5.3CVSS7.1AI score0.00181EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/09/16 12:00 a.m.•11 views

Amazon Linux 2 : libtiff, --advisory ALAS2-2025-2991 (ALAS-2025-2991)

The version of libtiff installed on the remote host is prior to 4.0.3-35. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2991 advisory. A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the...

5.3CVSS6AI score0.00181EPSS
SaveExploits0References4
Photon
Photon
•added 2025/09/16 12:00 a.m.•21 views

Moderate Photon OS Security Update - PHSA-2025-5.0-92-0620

Updates of 'libtiff' packages of Photon OS have been released...

5.5AI score
SaveExploits0
Photon
Photon
•added 2025/09/16 12:00 a.m.•15 views

Moderate Photon OS Security Update - PHSA-2025-5.0-91-0620

Updates of 'libtiff', 'ncurses' packages of Photon OS have been released...

5.3CVSS5.8AI score0.00219EPSS
SaveExploits1
Photon
Photon
•added 2025/09/16 12:00 a.m.•9 views

Moderate Photon OS Security Update - PHSA-2025-4.0-0870

Updates of 'libtiff' packages of Photon OS have been released...

2.5CVSS5.8AI score0.00219EPSS
SaveExploits1
Amazon
Amazon
•added 2025/09/15 12:00 a.m.•9 views

Low: libtiff

Issue Overview: A flaw has been found in LibTIFF 4.7.0. This affects the function TIFFmallocExt/TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of the component tiffcmp. Executing manipulation can lead to memory leak. The attack is restricted to local execution. The...

2.5CVSS6.3AI score0.00219EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2025/09/15 12:00 a.m.•16 views

Amazon Linux 2023 : libtiff, libtiff-devel, libtiff-static (ALAS2023-2025-1176)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1176 advisory. A flaw has been found in LibTIFF 4.7.0. This affects the function TIFFmallocExt/TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of the component tiffcmp. Executing manipulatio...

2.5CVSS4.6AI score0.00219EPSS
SaveExploits1References4
Microsoft CVE
Microsoft CVE
•added 2025/09/13 8:05 a.m.•13 views

LibTIFF fax2ps tiff2pdf.c t2p_read_tiff_init null pointer dereference

...

2.5CVSS7AI score0.00198EPSS
SaveExploits1
OSV
OSV
•added 2025/09/12 8:44 a.m.•13 views

CLSA-2025-1757666692 libtiff: Fix of CVE-2017-9117

CVE-2017-9117: add checks for all BMP reading operations to avoid buffer overflow...

9.8CVSS6AI score0.02221EPSS
SaveExploits1References1
Rows per page
Query Builder