Lucene search
+L

180 matches found

CNNVD
CNNVD
added 2025/09/22 12:00 a.m.9 views

LibTIFF 安全漏洞

LibTIFF is a LibTIFF open source library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A security vulnerability exists in LibTIFF that stems from the ability to perform arbitrary write operations...

8.8CVSS5.8AI score0.00792EPSS
SaveExploits0References7
OSV
OSV
added 2025/09/05 11:09 a.m.9 views

OESA-2025-2190 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

3.3CVSS6.3AI score0.00213EPSS
SaveExploits1References2
Veracode
Veracode
added 2025/08/21 7:49 a.m.10 views

Null Pointer Dereference

libtiff.so is vulnerable to Null Pointer Dereference. The vulnerability is due to improper handling in the t2preadtiffinit function of tools/tiff2pdf.c in the fax2ps component, which allows a local attacker to trigger a null pointer dereference under complex conditions...

2.5CVSS6.8AI score0.00191EPSS
SaveExploits1References10Affected Software2
CNVD
CNVD
added 2025/08/20 12:00 a.m.7 views

LibTIFF Buffer Overflow Vulnerability

LibTIFF is LibTIFF open source a library to read and write TIFF Tagged Image File Format files , the library contains a number of command-line tools to deal with TIFF files . LibTIFF has a buffer overflow vulnerability that originates from an incorrect operation of the file tiffcrop.c, which can ...

4.8CVSS7.4AI score0.002EPSS
SaveExploits1References1
CVE
CVE
added 2025/08/19 8:02 p.m.76 views

CVE-2025-9165

LibTIFF 4.7.0 contains a local, memory-leak flaw in tiffcmp.c (InitCCITTFax3 via _TIFFmallocExt/_TIFFCheckRealloc/TIFFHashSetNew). The vulnerability is described as high complexity with published exploitability, though there is ongoing doubt about the issue’s existence. A patch is available (ed14...

2.5CVSS3.6AI score0.00213EPSS
SaveExploits1References10Affected Software1
OSV
OSV
added 2025/08/15 11:09 a.m.8 views

OESA-2025-2050 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

2.5CVSS7AI score0.00186EPSS
SaveExploits1References2
OSV
OSV
added 2025/08/15 11:09 a.m.7 views

OESA-2025-2049 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

2.5CVSS7AI score0.00186EPSS
SaveExploits1References2
Fedora
Fedora
added 2025/08/15 1:04 a.m.10 views

[SECURITY] Fedora 42 Update: libtiff-4.7.0-7.fc42

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

2.5CVSS7.2AI score0.00191EPSS
SaveExploits2
Vulnrichment
Vulnrichment
added 2025/08/14 12:02 p.m.8 views

CVE-2025-8961 LibTIFF tiffcrop tiffcrop.c main memory corruption

A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to the public and could be exploited...

4.8CVSS3.6AI score0.002EPSS
SaveExploits1References7
OSV
OSV
added 2025/08/14 12:02 p.m.10 views

CVE-2025-8961 LibTIFF tiffcrop tiffcrop.c main memory corruption

A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to the public and could be exploited...

4.8CVSS5.8AI score
SaveExploits0References9
CNNVD
CNNVD
added 2025/07/26 12:00 a.m.7 views

LibTIFF 资源管理错误漏洞

LibTIFF is a LibTIFF open source library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A resource management error vulnerability exists in LibTIFF version 4.7.0 and earlier, which stems from the existence of...

7.8CVSS5.8AI score0.00243EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2023-30775

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c. CVE-2023-30775 Not...

5.5CVSS7AI score0.00296EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2022-3570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via craft...

7.7CVSS6.6AI score0.005EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2022-0891

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory...

7.1CVSS6.8AI score0.01542EPSS
SaveExploits1References2
Rosalinux
Rosalinux
added 2025/01/27 10:44 a.m.27 views

Advisory ROSA-SA-2025-2582

software: libtiff 4.1.0 OS: ROSA-CHROME packageevrstring: libtiff-4.1.0-8 CVE-ID: CVE-2024-7006 BDU-ID: 2024-06610 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the LibTIFF library involves null pointer dereferencing via tifdirinfo.c. Exploitation of the vulnerability could allow an attacker...

7.5CVSS6.7AI score0.01503EPSS
SaveExploits0
Photon
Photon
added 2024/08/24 12:00 a.m.14 views

Important Photon OS Security Update - PHSA-2024-5.0-90-0354

Updates of 'libtiff' packages of Photon OS have been released...

7.5CVSS6.8AI score0.01503EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/07/15 12:00 a.m.6 views

PT-2024-5544 · Libtiff +1 · Libtiff +1

Name of the Vulnerable Software and Affected Versions: LibTIFF affected versions not specified Description: The issue is related to the TIFFReadEncodedStrip function in the LibTIFF library, which is associated with an uncontrolled resource consumption. This can be exploited by a remote attacker t...

7.8CVSS6.9AI score
SaveExploits0References15
CNNVD
CNNVD
added 2024/07/12 12:00 a.m.8 views

Number withdrawn

LibTIFF is a LibTIFF open source library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command line tools for working with TIFF files. This CVE number has been withdrawn...

7AI score
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2024/02/06 12:00 a.m.16 views

The vulnerability of the TIFFOpen() function in the LibTIFF API library, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the TIFFOpen function in the LibTIFF library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS7AI score0.0181EPSS
SaveExploits1References14Affected Software4
CNNVD
CNNVD
added 2023/11/24 12:00 a.m.7 views

LibTIFF Security Vulnerability

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A security vulnerability exists in LibTIFF, which stems from a lack of memory, where passing a carefully crafted tiff file to the TIFFOpen AP...

6.5CVSS6.9AI score0.0181EPSS
SaveExploits1References5
Rows per page
Query Builder